Information processing device, information recording medium manufacturing device, information recording medium, methods therefore, and computer program

ABSTRACT

An information processing device for executing content reproduction processing includes: a content reproduction processing unit for executing data transformation processing for replacing a part of configuration data of input content to be reproduced with transformation data, and executing processing for reproducing the reproduction content; and a parameter generating unit for providing the content reproduction processing unit with a parameter to be applied in the data transformation processing; wherein the content reproduction processing unit has a configuration for obtaining a parameter identifier that is different for each segment set as a sectioning region of reproduction content, and outputting a parameter calculation request accompanied by the parameter identifier to the parameter generating unit; and wherein the parameter generating unit has a configuration for providing the content reproducing unit with a parameter corresponding to a segment, in response to the parameter calculation request from the content reproducing unit.

CROSS REFERENCES TO RELATED APPLICATIONS

This application claims the benefit to U.S. Provisional PatentApplication 60/724,803 filed Oct. 11, 2005.

The present invention contains subject matter related to Japanese PatentApplication JP 2005-265476 filed in the Japanese Patent Office on Sep.13, 2005, the entire contents of which are incorporated herein byreference.

BACKGROUND OF THE INVENTION

1. Field of the Invention

The present invention relates to an information processing device, aninformation recording medium manufacturing device, an informationrecording medium, methods thereof, and a computer program. Morespecifically, the present invention relates to an information processingdevice, an information recording medium manufacturing device, aninformation recording medium, methods thereof, and a computer program,wherein unauthorized content usage is eliminated by data transformationprocessing performed on various contents regarding which content usagemanagement is requested, thereby realizing strict content usagemanagement.

2. Description of the Related Art

Various types of software data, such as audio data like music and soforth, image data like movies and so forth, game programs, various typesof application programs and so forth (hereafter referred to as“content”) can be stored as digital data in recording media, forexample, Blu-ray disks which employ blue laser, or DVD (DigitalVersatile Disc), MD (Mini Disc), and CD (Compact Disc). In particular,Blu-ray disks which employ blue laser are high-density recording-capabledisks, and can record massive amounts of picture contents and the likeas high-image-quality data.

Digital content is stored in such various types of information recordingmediums (recording media) so as to be provided to users. Users reproduceand use the content on a reproduction device such as a PC (PersonalComputer), disk player, etc., owned by the user.

Generally, the distribution right and so forth of many contents such asmusic data, image data, and so forth, is held by the creator or vendorthereof. Accordingly, at the time of distribution of content, anarrangement is normally implemented wherein certain restrictions onusage are laid down, i.e., usage of content is permitted only forauthorized users, and unauthorized reproduction and the like isprevented.

With digital recording devices and recording media, recording andreproduction can be repeated without deterioration in image or audio forexample, and problems are occurring such as distribution of illegallycopied contents over the Internet, distribution of so-called bootlegedition disks of contents copied onto CD-Rs or the like, usage of copiedcontents stored on hard disks of PCs and the like, in proliferation.

Large-capacity recording media such as DVDs, recording media using bluelaser which have been developed in recent years, and so forth, arecapable of recording great amounts of data, e.g., one to several movies,as digital information on a single disk. The ability to record pictureinformation and the like as digital information makes preventingunauthorized copies to protect copyright holders an even more importantissue. Various techniques have been implemented as of recent forpreventing unauthorized copying to digital recording devices andrecording media, in order to prevent such unauthorized copying ofdigital data.

SUMMARY OF THE INVENTION

One technique to prevent unauthorized copying of content and protect thecopyright holder is encryption processing of the content. However, evenwith encrypted content, there is the problem that if the secret key isleaked, unauthorized decrypted content leaks out. The arrangementdescribed in Japanese Unexamined Patent Application Publication No.11-45508 is a related art wherein an arrangement is disclosed of solvingsuch problems. Japanese Unexamined Patent Application Publication No.11-45508 discloses an arrangement wherein unauthorized reproduction ofcontent is prevented by rewriting a part of the content with dummy data.

At the time of reproduction processing of content wherein content hasbeen replaced with dummy data, processing for replacing the dummy datawith the original content data again is necessary. This datatransformation processing must be performed without external leakage ofthe original content, and also, it is preferable that leakage ofprocessing information such as the position of the dummy data and thetransformation method is prevented. The current state of the art is thatthere are still many issues to study regarding such an arrangement forperforming such processing at the time of reproduction in a safe mannerwith information leakage prevented.

The present invention has been made in light of the above-describedcurrent state, and accordingly, it is desirable to provide aninformation processing device, an information recording mediummanufacturing device, an information recording medium, methods thereof,and a computer program, wherein prevention of unauthorized content usageis effectively realized by destroying contents by partial replacement ofcontent configuration data, and realizing secure data processing whichprevents leakage of information in the reproduction processing.

An information processing device for executing content reproductionprocessing, according to an embodiment of the present invention,includes: a content reproduction processing unit for executing datatransformation processing for replacing a part of configuration data ofinput content to be reproduced with transformation data, and executingprocessing for reproducing the reproduction content; and a parametergenerating unit for providing the content reproduction processing unitwith a parameter to be applied in the data transformation processing;wherein the content reproduction processing unit has a configuration forobtaining a parameter identifier that is different for each segment setas a sectioning region of reproduction content, and outputting aparameter calculation request accompanied by the parameter identifier tothe parameter generating unit; and wherein the parameter generating unithas a configuration for providing the content reproducing unit with aparameter corresponding to a segment, in response to the parametercalculation request from the content reproducing unit.

Further, the content reproduction processing unit may have aconfiguration for subjecting fix-up table data including thetransformation data to execution of computation processing or encryptionprocessing applying the parameter corresponding to the segment obtainedfrom the parameter generating unit, and for executing restorationprocessing of data including the transformation data applied asreplacement data as to the configuration data of the segment.

Further, the content reproduction processing unit may have aconfiguration for executing processing for obtaining a packet number ofa configuration packet of a segment included in a reproduction section,from an EP map included in clip information which is contentreproduction section information; and referencing a parameter identifierdetermining table correlating the parameter identifier with a packetnumber serving as content configuration data, and obtaining a parameteridentifier corresponding to a packet number of a configuration packet ofthe segment.

Further, the parameter identifier determining table may be a tablewherein the parameter identifier and the packet number of a packet atthe head position of a segment which is content configuration data arecorrelated.

Further, the packet number may be a source packet number (SPN)corresponding to an I-picture included in an EP map.

Further, the content reproduction processing unit may have aconfiguration for executing processing for obtaining an EP mapregistration table ID which is a registration table identifier of an EPmap included in clip information which is content reproduction sectioninformation; and referencing a parameter identifier determining tablecorrelating the parameter identifier with the EP map registration tableID, to obtain a parameter identifier corresponding to the packet numberof a configuration packet of the segment.

Further, the parameter identifier determining table may be a tablewherein the parameter identifier, and the EP map registration table IDwhich is a registration table identifier of an EP map includinginformation of a packet at the head position of a segment which iscontent configuration data, are correlated.

Further, the content reproduction processing unit may have aconfiguration for executing processing for obtaining an EP mapregistration table ID which is a registration table identifier of an EPmap included in clip information which is content reproduction sectioninformation; and calculating a parameter identifier corresponding to thesegment, based on the EP map registration table ID.

Further, the content reproduction processing unit may have aconfiguration for executing processing for calculating a parameteridentifier corresponding to the segment based on the EP map registrationtable ID, following the following expression:(SP_ID)=(EP_map_ID)/N

-   -   wherein SP_ID: parameter identifier;    -   EP_map_ID: EP map registration table ID; and    -   N: the number of EP map registration tables set corresponding to        one segment.

Further, the content reproduction processing unit may have aconfiguration for executing processing for counting the number of timesof usage of an EP map registration table included in clip informationwhich is content reproduction section information, and calculating aparameter identifier corresponding to the segment based on the count forthe EP map registration table.

Further, the content reproduction processing unit may have aconfiguration for executing processing for obtaining fix-up table dataincluding the transformation data from packets contained in the content,executing computation processing or encryption processing applying aparameter corresponding to a segment obtained from the parametergenerating unit, and executing restoration processing of data includingtransformation data applied as replacement data as to configuration dataof the segment.

Further, the content reproduction processing unit may have aconfiguration for executing processing for obtaining fix-up table dataincluding the transformation data from a fix-up table data different andindependent from the content, executing computation processing orencryption processing applying a parameter corresponding to a segmentobtained from the parameter generating unit, and executing restorationprocessing of data including transformation data applied as replacementdata as to configuration data of the segment.

Further, the parameter calculating unit may have a configuration forbeing executed by a virtual machine set within the informationprocessing device.

Further, the information processing device may have a configuration fora parameter calculation request from the content reproduction processingunit to the parameter calculating unit being executed as an interruptionrequest, and parameter provision from the parameter calculating unit tothe content reproduction processing unit being executed as a response tothe interruption request.

An information recording medium manufacturing device according toanother embodiment of the present invention includes: a data processingunit for generating content including broken data different from propercontent configuration data, and a fix-up table including a parameteridentifier determining table storing fix-up table body data stored bysubjecting transformation data for replacement with the broken data tocomputation or encryption processing with a parameter set correspondingto a segment which is a sectioned region of content, and a parameteridentifier which is identification information of the parameter; and adata recording unit for recording content including the broken data, andthe fix-up table, in an information recording medium.

Further, the parameter identifier determining table may be a tablewherein the parameter identifier and the packet number of a packet atthe head position of a segment which is content configuration data arecorrelated.

Further, the parameter identifier determining table may be a tablewherein the parameter identifier and an EP map registration table IDwhich is a registration table identifier of an EP map includinginformation of a packet at the head position of a segment which iscontent configuration data are correlated.

An information recording medium according to another embodiment of thepresent invention has stored: content of which a part of contentconfiguration data is replaced and reproduced; a fix-up table havingcorresponded and registered a parameter identifier set corresponding toa segment wherein the content configuration data is sectioned intomultiple segments and set, and transformation data which is an object tobe replaced by a part of the content configuration data to be replaced;where the transformation data is data having performed computation orcoding processing based on the parameter corresponding to the parameteridentifier.

Further, the information recording medium may further have apresentation timestamp (PTS) of the entry point and an EP map to which apacket number which is an address is correlated and registered; whereinthe segment is sectioned based on the multiple entry points registeredto the EP map.

Further, the segment may be sectioned based on a fixed number of entrypoints.

An information processing method for executing content reproductionprocessing, according to another embodiment of the present invention,includes the steps of: content reproduction processing executed in acontent reproduction processing unit for data transformation processingfor replacing a part of configuration data of input content to bereproduced with transformation data, and processing for reproducing thereproduction content; and parameter generating executed in a parametergenerating unit, for providing the content reproduction processing witha parameter to be applied in the data transformation processing; whereinthe content reproduction processing has a step for obtaining a parameteridentifier that is different for each segment set as a sectioning regionof reproduction content and outputting a parameter calculation requestaccompanied by the parameter identifier to the parameter generatingunit; and wherein the parameter generating has a step for providing thecontent reproducing unit with a parameter corresponding to a segment, inresponse to the parameter calculation request from the contentreproducing unit.

Further, the content reproduction processing may have a step forsubjecting fix-up table data including the transformation data toexecution of computation processing or encryption processing applyingthe parameter corresponding to the segment obtained from the parametergenerating unit, and for executing restoration processing of dataincluding the transformation data applied as replacement data as to theconfiguration data of the segment.

Further, the content reproduction processing may have a step forexecuting processing for obtaining a packet number of a configurationpacket of a segment included in a reproduction section, from an EP mapincluded in clip information which is content reproduction sectioninformation; and referencing a parameter identifier determining tablecorrelating the parameter identifier with a packet number serving ascontent configuration data, and obtaining a parameter identifiercorresponding to a packet number of a configuration packet of thesegment.

Further, the parameter identifier determining table may be a tablewherein the parameter identifier and the packet number of a packet atthe head position of a segment which is content configuration data arecorrelated.

Further, the packet number may be a source packet number (SPN)corresponding to an I-picture included in an EP map.

Further, the content reproduction processing may have a step forexecuting processing for obtaining an EP map registration table ID whichis a registration table identifier of an EP map included in clipinformation which is content reproduction section information; andreferencing a parameter identifier determining table correlating theparameter identifier with the EP map registration table ID, to obtain aparameter identifier corresponding to the packet number of aconfiguration packet of the segment.

Further, the parameter identifier determining table may be a tablewherein the parameter identifier, and the EP map registration table IDwhich is a registration table identifier of an EP map includinginformation of a packet at the head position of a segment which iscontent configuration data, are correlated.

Further, the content reproduction processing may have a step forexecuting processing for obtaining an EP map registration table ID whichis a registration table identifier of an EP map included in clipinformation which is content reproduction section information; andcalculating a parameter identifier corresponding to the segment, basedon the EP map registration table ID.

Further, the content reproduction processing may have a step forexecuting processing for calculating a parameter identifiercorresponding to the segment based on the EP map registration table ID,following the following expression:(SP_ID)=(EP_map_ID)/N

-   -   wherein SP_ID: parameter identifier;    -   EP_map_ID: EP map registration table ID; and    -   N: the number of EP map registration tables set corresponding to        one segment.

Further, the content reproduction processing may have a step forexecuting processing for counting the number of times of usage of an EPmap registration table included in clip information which is contentreproduction section information, and calculating a parameter identifiercorresponding to the segment based on the count for the EP mapregistration table.

Further, the content reproduction processing may have a step forexecuting processing for obtaining fix-up table data including thetransformation data from packets contained in the content, executingcomputation processing or encryption processing applying a parametercorresponding to a segment obtained from the parameter generating unit,and executing restoration processing of data including transformationdata applied as replacement data as to configuration data of thesegment.

Further, the content reproduction processing may have a step forexecuting processing for obtaining fix-up table data including thetransformation data from a fix-up table data different and independentfrom the content, executing computation processing or encryptionprocessing applying a parameter corresponding to a segment obtained fromthe parameter generating unit, and executing restoration processing ofdata including transformation data applied as replacement data as toconfiguration data of the segment.

An information recording medium manufacturing method according toanother embodiment of the present invention includes the steps of: dataprocessing, for generating content of which a part of contentconfiguration data is replaced and reproduced, and a fix-up table havingcorresponded and registered a parameter identifier set corresponding toa segment wherein the content configuration data is sectioned intomultiple segments and set, and transformation data which is an object tobe replaced by a part of the content configuration data to be replaced;and data recording, for recording content including the broken data, andthe fix-up table, in an information recording medium.

A computer program for executing content reproduction processing on aninformation processing device according to another embodiment of thepresent invention includes the steps of: content reproduction processingexecuted in a content reproduction processing unit for datatransformation processing for rewriting a part of configuration data ofinput content to be reproduced, and processing for reproducing thereproduction content; and parameter generating executed in a parametergenerating unit, for providing the content reproduction processing unitwith a parameter to be applied in the data transformation processing;wherein the content reproduction processing has a step for obtaining aparameter identifier that is different for each segment set as asectioning region of reproduction content and outputting a parametercalculation request accompanied by the parameter identifier to theparameter generating unit; and wherein the parameter generating has astep for providing the content reproducing unit with a parametercorresponding to a segment, in response to the parameter calculationrequest from the content reproducing unit.

Note that the computer program according to the present invention maybe, for example, a computer program capable of providing a computersystem capable of executing various types of program codes, throughstorage media or communication media capable of providing in acomputer-readable format, e.g., recording mediums such as CDs, FDs, MOs,and so forth, or communication mediums such as a network or the like.Providing such a program in a computer-readable format realizesprocessing corresponding to the program on the computer system.

Other objects, features, and advantages of the present invention willbecome apparent from further detailed description by way oflater-described embodiments of the present invention and attacheddrawings. Note that the term “system” as used in the presentspecification refers to a logical assembly arrangement of multipledevices, and is not restricted to an arrangement wherein all of thecomponent devices are in the same housing.

According to an embodiment of the present invention, with aconfiguration for restoring and obtaining data transformed by parametercomputation or encryption processing different for each segment set assectioning region of content, and executing reproduction of the contentwhile replacing a part of the data of the content with the obtainedtransformation data, a configuration may be realized wherein a parameterID corresponding to a segment is obtained based on a table correlatingan SPN (source packet number) included in the content to be reproducedand a parameter ID (SP_ID), or based on a table correlating aregistration table identifier of an EP map (EP map registration tableID) storing information of a packet included in a segment of the contentto be reproduced and a parameter ID, the obtained parameter ID (SP_ID)is notified to a secure VM, and a secret parameter calculation request(INTRP) is carried out, so content reproduction can be performed whileperforming proper data transformation by sequentially receiving secretparameters (SP) corresponding to each segment from the secure VM in aproper manner.

Also, according to an embodiment of the present invention, aconfiguration may be implemented wherein a reproduction (player)application of executing content reproduction first determines an EP mapcorresponding to the content data to be reproduced from an EP mapregistered in clip information which is content reproduction sectioninformation, and obtains a parameter ID (SP_ID) either by applying acalculation formula of by a count of EP map registration tables, basedon the registration table identifier of the EP map (EP map registrationtable ID), the obtained parameter ID (SP_ID) is notified to a secure VM,and a secret parameter calculation request (INTRP) is carried out, sothe parameter ID (SP_ID) can be obtained without applying a specialparameter ID determining table, and content reproduction can beperformed while performing proper data transformation by sequentiallyreceiving secret parameters (SP) corresponding to each segment from thesecure VM in a proper manner.

BRIEF DESCRIPTION OF THE DRAWINGS

FIG. 1 is a diagram describing the configuration and processing ofstored data in an information recording medium, and a drive device andinformation processing device;

FIG. 2 is a diagram describing a setting example of a content managingunit for settings made regarding stored data in the informationrecording medium;

FIG. 3 is a diagram describing the correlation between the contentmanaging unit for settings made regarding stored data in the informationrecording medium and a unit key;

FIG. 4 is a diagram describing content recorded in the informationrecording medium, and data transformation processing necessary forreproducing the content;

FIG. 5 is a diagram describing data configuration in the case of afix-up table being stored in packets of a transport stream includingcontent;

FIG. 6 is a diagram describing the details of the content and the fix-uptable stored in the information recording medium;

FIG. 7 is a diagram illustrating the data configuration of fix-upentries included in a fix-up table;

FIG. 8 is a diagram describing data transformation processing applyingfix-up entries within TS packets making up the content;

FIG. 9 is a diagram describing data transformation processing applyingfix-up entries included in a fix-up table;

FIG. 10 is a diagram describing the processing sequence carried outbetween a reproduction (player) application and a secure VM;

FIG. 11 is a diagram describing processing for copying a fix-up table,carried out in the title initialization processing within the processingsequence between the reproduction (player) application and the secureVM;

FIG. 12 is a diagram describing a sequence for accepting and rejectionprocessing at the secure VM;

FIG. 13 is a diagram describing a processing example of contentreproduction processing;

FIG. 14 is a diagram describing data transformation processing executedat the time of content reproduction;

FIG. 15 is a diagram describing the overview of a processing example 1for obtaining an SP identifier (SP_ID) corresponding to a segment;

FIG. 16 is a diagram describing an EP map;

FIG. 17 is a diagram describing an EP map;

FIG. 18 is a diagram describing the sequence of a processing example 1for obtaining an SP identifier (SP_ID) corresponding to a segment, and aconfiguration example of the SP_ID determining table;

FIG. 19 is a diagram illustrating the entire data configuration of afix-up table;

FIG. 20 is a diagram describing a configuration example of an SP_IDdetermining table;

FIG. 21 is a diagram illustrating the data configuration of a fix-uptable body contained in a fix-up table;

FIG. 22 is a diagram illustrating the data configuration of a fix-uptable block (FUT block) contained in a fix-up table body;

FIG. 23 is a diagram illustrating a flowchart describing a contentreproducing sequence in a case of applying the processing example 1 forobtaining an SP identifier (SP_ID) corresponding to a segment;

FIG. 24 is a diagram illustrating a flowchart describing a contentreproducing sequence for special reproduction in a case of applying theprocessing example 1 for obtaining an SP identifier (SP_ID)corresponding to a segment;

FIG. 25 is a diagram describing a configuration example of the SP_IDdetermining table in a processing example 2;

FIG. 26 is a diagram illustrating a flowchart describing a contentreproducing sequence in a case of applying the processing example 2 forobtaining an SP identifier (SP_ID) corresponding to a segment;

FIG. 27 is a diagram illustrating a flowchart describing a contentreproducing sequence for special reproduction in a case of applying theprocessing example 2 for obtaining an SP identifier (SP_ID)corresponding to a segment;

FIG. 28 is a diagram describing the overview of a processing example 3for obtaining an SP identifier (SP_ID) corresponding to a segment;

FIG. 29 is a diagram illustrating a flowchart describing a contentreproducing sequence in a case of applying the processing example 3 forobtaining an SP identifier (SP_ID) corresponding to a segment;

FIG. 30 is a diagram illustrating a flowchart describing a contentreproducing sequence for special reproduction in a case of applying theprocessing example 3 for obtaining an SP identifier (SP_ID)corresponding to a segment; and

FIG. 31 is a diagram describing a hardware configuration example of aninformation processing device for executing applications as a host.

DESCRIPTION OF THE PREFERRED EMBODIMENTS

The information processing device, information recording mediummanufacturing device, information recording medium, methods thereof, andcomputer program, according to the present invention, will be describedin detail with reference to the drawings. Note that the description willbe made according to the following items.

1. Overview of Stored Data in an Information Recording Medium, andProcessing at a Drive and a Host

2. About the Content Managing Unit (CPS unit)

3. Overview of Data Configuration of Content Including Modified Data,and Data Transformation Processing

4. Processing of Reproduction (Player) Application and Secure VM

5. Content Reproduction Processing

6. Processing for Obtaining SP Identifier (SP_ID) Corresponding toSegment]

(6.1) Processing Example 1 for Obtaining SP Identifier (SP_ID)Corresponding to Segment

(6.2) Processing Example 2 for Obtaining SP Identifier (SP_ID)Corresponding to Segment

(6.3) Processing Example 3 for Obtaining SP Identifier (SP_ID)Corresponding to Segment

7. Configuration of Information Processing Device

8. Information Recording Media Manufacturing Device and InformationRecording Medium

1. Overview of Stored Data in an Information Recording Medium, andProcessing at a Drive and a Host

First, description will be made regarding the overview of stored data inan information recording medium, and processing at a drive and a host.FIG. 1 illustrates the configuration of an information recording medium100 with content stored therein, a drive 120, and a host 140. The host140 is a data reproduction (or recording) application which is executedon an information processing device such as a PC or the like, forexample, and performs processing using the hardware of the informationprocessing device such as a PC or the like, following a predetermineddata processing sequence.

The information recording medium 100 is an information recording mediumsuch as, for example, a Blu-ray disk, DVD, or the like, and is aninformation recording medium storing authorized content (ROM disc or thelike), manufactured at the disc manufacturing plant under the permissionof the so-called content right holder, having proper content rights ordistribution rights, or an information recording medium capable ofrecording data (RE disk or the like). Note that with the followingembodiment, a disk-type medium will be used as an example for describingthe information recording medium, the present invention is capable ofbeing applied to configurations using various types of informationrecording media.

As shown in FIG. 1, the information recording medium 100 stores inencrypted content 101 which has been subjected to encryption processingand partial replacement of data, MKB (Medium Key Block) 102 which is theencryption key block generated based on a tree structure keydistribution method known as a type of broadcast encryption method, atitle key file 103 configured of data wherein a title key to be appliedfor content decryption processing is encrypted (Encrypted CPS Unit Key)and so forth, usage rule 104 including CCI (Copy Control Information)and the like serving as copying/reproduction control information ofcontent, a Fix-Up Table 105 wherein is registered transformation datacorresponding to replacement data at a predetermined region within thecontent, and a data transformation processing program 106 includingprocessing commands for executing the data transformation processing andFix-Up Table 105. Note that the data example shown in the diagram is butan example, and the stored data differs more or less depending on thetype of disk. The overview of each of these types of information will bedescribed.

(1) Encrypted Contents 101

Various types of contents are stored in the information recording medium100. Examples of the contents include AV (Audio Visual) streams ofmoving picture contents such as HD (High-Definition) movie content whichis high-definition moving picture data, game programs of a formatstipulated under a particular standard, image files, audio data, textdata, and so forth. These contents are data stipulated under aparticular AV format, and are stored according to the particular AV dataformat. Specifically, this is stored according to the Blu-ray disk ROMstandard format, as Blu-ray disk ROM standard data, for example.

Further, there are cases wherein game programs, image files, audio data,text data, and so forth, are stored as service data, for example. Thereare cases wherein these contents are stored as data having a data formatnot following the particular AV data format.

Types of contents include various contents such as music data, movingpicture, still images, and like image data, as well as game programs,Web contents, and so forth, and information of various forms is includedin these contents, such as content information usable only by the datafrom the information recording medium 100, content information usable bycombining data from the information recording medium 100 and dataprovided from the server connected to a network, and so forth. Contentsstored in the information recording medium are stored encrypted, with adifferent key appropriated for each section content (CPS unit key orunit key (or also may be called a title key)), to realize differentusage control for each section content. Each unit to which one unit keyis appropriated is called a content managing unit (CPS unit). Further,the configuration data of the content is set as broken data wherein apart thereof that is replaced with data different from the correctcontent data, so decryption processing alone does not reproduce thecorrect content, and processing for replacing the broken data with dataregistered in a fix-up table is necessary to perform reproduction. Thisprocessing will be described later in detail.

(2) MKB

The MKB (media key block) 102 is an encryption key block generated basedon a tree structure key distribution method known as a type of broadcastencryption method. The MKB 102 is a key information block enablingacquiring of a media key [Km] necessary for decrypting contents, onlyfor processing (decryption) based on a device key [Kd] stored on theinformation processing device of the user having a valid license. Thisis an application and then information distribution method following aso-called hierarchical tree structure, enabling the acquiring of themedia key [Km] only in the event that the user device (informationprocessing device) has a valid license, and user devices which areinvalidated (revoking processing) are incapable of acquiring a media key[Km].

An administration center serving as a license entity can generate an MKBhaving a structure which cannot be decrypted with the device key storedin a certain user device, i.e., wherein the media key necessary forcontent decryption cannot be acquired, by changing the device key usedfor decryption of key information stored in the MKB. Accordingly,unauthorized devices can be an revoked at an arbitrary timing, therebyproviding encrypted contents capable of decryption only to deviceshaving valid licenses. Content decryption processing will be describedlater.

(3) Title Key File

As described above, each content or group of multiple contents aresubjected to encryption applying a individual encryption keys for each(title key (CPS unit key)) for managing usage of contents, and stored inthe information recording medium 100. That is to say, AV (audio visual)streams, music data, moving pictures, still images, and like image data,game programs, Web content, and so forth, making up the contents, needto be sectioned into units of management of contents usage, with adifferent title key generated for each section unit, thereby carryingout decryption processing. Information for generating these title keysis title key data, and a title key is obtained by decrypting anencrypted title key with a key generated by a media key or the like, forexample. Title keys corresponding to each unit are generated following apredetermined encryption key generating sequence using title key data,and decryption of contents is carried out.

(4) Usage Rule

Usage rule includes, for example, copy/reproduction control information(CCI). This is copy restriction information and reproduction restrictioninformation for usage control corresponding to the encrypted contents101 stored in the information recording medium 100. There are varioussettings for the copy/reproduction control information (CCI), such ascases as information for individual CPS units set as content managingunits, cases for being set corresponding to multiple CPS units, and soforth.

(5) Fix-Up Table

As described above, the encrypted content 101 stored in the informationrecording medium 100 has been subjected to predetermined encryption, andalso, a part of the contents configuration data is configured of brokendata which is different from the proper data. In order to reproduce thecontent, data overwriting processing is necessary, wherein the brokendata is replaced with the transformation data which is the propercontent data. The table in which the transformation data is registeredis a fix-up table 105. A great number of broken data is set scatteredthroughout the content, and at the time of reproducing the content,processing is necessary for replacing (overwriting) the multiple piecesof broken data with the transformation data registered in the fix-uptable. Applying this transformation data means that even in the eventthat unauthorized content decryption is performed due to an encryptionkey leaking, for example, reproduction of proper content is impossibleby content decryption alone, due to the presence of the replaced data,thereby enabling unauthorized contact usage to be prevented.

In addition to normal transformation data, the fix-up table 105 includestransformation data enabling analyzing data identification informationconfiguration bits for identifying the contents reproducing device orcontent reducing application. Specifically, for example, this includes aplayer ID which is identification data of a player (a device forexecuting a host application), or “transformation data includingidentification marks” wherein is recorded identification informationgenerated based on the player ID. Transformation data including theidentification marks is data where in the bid values of the propercontent data has been slightly changed, at the level which does notaffect the reproduction of content. Details of processing using suchtransformation data will be described later.

While FIG. 1 illustrates an example wherein the fix-up table 105 is setas an independent data file, a configuration may be made wherein thefix-up table is not an independent file, but scattered throughout theconfiguration packets of the encrypted contents 101. The configurationand processing of these will be described later.

(6) Data Transformation Processing Program

The data transformation processing program 106 is a program includingprocessing commands for executing the data transformation processing byregistered data in the fix-up table 105, and is used by a host whichreproduces the content. This is executed at a data transformationprocessing unit 154 of the host 100 shown in FIG. 1. Note that theabove-described fix-up table 105 may be set as data included in the datatransformation processing program 106.

At the host, a virtual machine (VM) for executing the datatransformation processing is set, the data transformation processingprogram 106 read out of the information recording medium 100 is executedat the virtual machine (VM), a registration entry in the fix-up table105 is applied, and data transformation processing of the partialconfiguration data is executed with regard to the decrypted content.Details of this processing will be described later.

Next, the configuration of the host 140 and drive 120, and overview ofprocessing, will be described with reference to FIG. 1. Reproductionprocessing of the content stored in the information recording medium 100is executed upon data being transferred to the host 140 via the drive120.

The host 140 has a reproduction (player) application 150 and a secure VM160 set. The reproduction (player) application 150 is a contentreproduction processing unit, and executes processing such asauthentication processing carried out with the drive at the time ofcontent reproduction processing, content decryption, decodingprocessing, and so forth. The secure VM 160 functions as a parametergenerating unit for providing parameters to be applied to the datatransformation processing carried out in the content reproductionprocessing executed by the reproduction (player) application 150 whichis the content reproduction processing unit, for example, the secure VM160 is set as the virtual machine within the host 140. The virtualmachine (VM) is a virtual computer which directly interprets andexecutes an intermediate language, and reads out, interprets, andexecutes, command code information in an intermediate language notdependent on a platform, from the information recording medium 100.

Transfer of information or processing requests between the reproduction(player) application 150 and the secure VM 160 is carried out bysequences of interruption (INTRP) from the reproduction (player)application 150 to the secure VM 160, and a response (Call) processingfrom the secure VM 160 to the reproduction (player) application 150. Thesequences of interruption (INTRP) from the application 150 to the secureVM 160, and response (Call) processing from the secure VM 160 to thereproduction (player) application 150 perform parameter calculatingrequests and providing of parameters applied to the data transformationprocessing executed in the content reproduction processing. Theseprocessing sequences will be described in detail later.

The primary processing which the host 140 executes will be described.Before usage of the content, mutual authentication processing isexecuted between the drive 120 and host 140, and following confirmationof the validity of both parties by this authentication processing beingestablished, encrypted content is transferred from the drive to thehost, content decryption processing is performed at the host side, andfurther, the above-described data transformation processing by thefix-up table is executed, whereby content reproduction is performed.

For the mutual authentication executed between the host 140 and thedrive 120, processing for determining the validity is executed byreferencing a revocation (invalidation) list issued by an AdministrationCenter whether or not each of the devices or applications are registeredas an unauthorized device or application.

The drive 120 has memory 122 for storing a host CRL (CertificateRevocation List) storing revocation (invalidation) information of thehost certificate (public key certificate). On the other hand, the host140 has memory 152 for storing a drive CRL (Certificate Revocation List)storing revocation (invalidation) information of the drive certificate(public key certificate). The memory is nonvolatile memory (NVRAM), andin the event that the CRL read out from the information recording medium100 is a newer version, for example, their respective data processingunits 121 and 151 performer updating processing for storing the host CRLor the drive CRL of the new version in the memory 122 and 152.

A CRL, such as the host CRL or drive CRL is constantly updated by theadministration center. That is to say, in the event that an unauthorizeddevice has been newly discovered, an updated CRL where in thecertificate ID issued to the unauthorized device or the device ID or thelike is added at as a new entry, is issued. Each CRL is provided withthe version number, and has a configuration wherein the newness can becompared. For example, in the event that a CRL read out from aninformation recording medium mounted to the drive is newer than the CRLstored in the memory 122 within the drive, the drive performs CRLupdating processing. The host 140 also performs drive CRL updating inthe same way.

Besides this CRL updating processing, the data processing unit 121 ofthe drive 120 performs authentication processing with a host that isexecuted at the time of using content, and further performs processingfor reading data from the information recording medium and transferringthe data to the host.

The reproduction (player) application 150 of the host 140 is a datareproduction (or recording) application executed on an informationprocessing device such as the PC for example, and performs processingusing the hardware of the information processing device such as a PC orthe like, following a predetermined data processing sequence.

The host 140 has a data processing unit 151 for performing mutualauthentication processing with the drive 120, data transfer control, andso forth, a decryption processing unit 153 for performing decryptionprocessing of encrypted content, a data transformation processing unit154 for performing data transformation processing based on registereddata in the aforementioned fix-up table 105 and a decoding processingunit 155 for performing decoding (e.g., MPEG decoding) processing.

The data processing unit 151 executes authentication processing betweenthe host and drive, and within the authentication processing, referencesthe drive CRL stored in memory a152 which is nonvolatile memory (NVRAM),to confirm that the drive is not a drive which has been revoked. Thehost also performs updating processing to store the drive CRL of a newversion in the memory a152.

The decryption processing unit 153 generates the key to be applied tocontent decryption, using various types of information stored in thememory b156 and data read from the information recording medium 100,executing decryption processing of the encrypted content 101. The datatransformation processing unit 154 performs replacement processing(overwriting) of contents configuration data applying the transformationdata registered in the fix-up table obtained from the informationrecording medium 100, following the data transformation processingprogram obtained from the information recording medium 100. The decodingprocessing unit 155 performs decoding (e.g., MPEG decoding) processing.

The memory b156 of the information processing device 150 stores a devicekey: Kd, key information to be applied to mutual authenticationprocessing, key information to be applied to decryption, and so forth.Details of content decryption processing will be described later. Thedevice key: Kd is a key to be applied to the above-described MKBprocessing. MKB is a key information block which enables obtaining of amedia key [Km], which is a key necessary for deciphering content, to beobtainable only by processing (decrypting) based on a device key [Kd]stored in the information processing device of the user which has avalid license, and at the time of decrypting encrypted content, theinformation processing device 150 applies the device key: Kd stored inthe memory b156 to execute the MKB processing. Details of contentdecryption processing will be described later.

2. About the Content Managing Unit (CPS Unit)

As described above, the content stored in the information recordingmedium is subjected to decryption processing and is stored withdifferent keys appropriated for each unit, in order to realize differentusage control for each unit. That is to say, the content is sectionedinto content managing unit (CPS units), individual decryption processingis performed, and individual usage management is made.

At the time of using contents, first, there is the need to obtain a CPSunit Key (also called a title key) appropriated to each unit, andfurther, reproduction is performed by executing data processing based ondecryption processing sequences determined beforehand, applying othernecessary keys, key generating information, and so forth. The settingsof a content management unit (CPS unit) will be described with referenceto FIG. 2.

As shown in FIG. 2, the content has a hierarchical configuration of (A)index 210, (B) movie object 220, (C) playlist 230, and (D) clip 240.Specifying an index such as a title to be accessed by the reproductionapplication specifies a reproduction program correlated with the title,for example, and the play list stipulating the order of reproducing thecontent is selected according to the program information of thereproduction program that has been specified.

Play items are included in the play list as information of the data tobe reproduced. An AV stream which is actual data of the content, orcommands, are selectively read out by clip information for reproductionsections stipulated by play items included in the play list, andreproduction of the AV stream and execution processing of the commandsare performed. Note that a great number of playlists and play itemsexist, and each has a corresponding playlist ID and play item ID, asidentification information.

FIG. 2 illustrates two CPS units. These make up a part of the contentstored in the information recording medium. Each of the CPS unit 1 271,and the CPS unit 2 272 are CPS units which have been set as unitsincluding a title serving as an index, a movie object which is areproduction program file, a play list, and a clip including an AVstream file which is the actual contents data.

A content managing unit (CPS unit) 1 271 includes a title 1 211 andtitle 2 212, reproduction programs 221 and 222, play lists 231 and 232,a clip 241 and a clip 242, and AV stream data files 261 and 262 whichare the actual data of the content contained in the two clips 241 and242 are at least the object data of encryption, and accordingly is setas data encrypted applying a title key (Kt1) which is an encryption keyset corresponding to the content managing unit (CPS unit) 1 271 as arule (also called a CPS unit key).

A content managing unit (CPS unit) 2 271 includes an application 1 213as an index, a reproduction program 224, playlist 233, and a clip 243,and an AV stream data file 263 which is the actual data of the contentcontained in the clip 243 is encrypted applying a title key (Kt2) whichis an encryption key set corresponding to the content managing unit (CPSunit) 2 272.

For example, in order for the user to execute an application file orcontent reproducing processing corresponding to the content managingunit 1 271, a title key: Kt1 serving as an encryption key which is setso as to be correlated with the content managing unit (CPS unit) 1 271,needs to be obtained and subjected to decryption processing. In orderfor the user to execute an application file or content reproducingprocessing corresponding to the content managing unit 2 272, a titlekey: Kt2 as an encryption which is set so as to be correlated with thecontent managing unit (CPS unit) 2 272, needs to be obtained andsubjected to decryption processing.

FIG. 3 shows the CPS unit setting configuration, and example ofcorresponding title keys. FIG. 3 shows correlation between CPS unitsetting units which are units for managing usage of the encryptedcontent stored in the information recording medium, and title keys (theCPS unit keys) applicable to each CPS unit. Note that a CPS unit andtitle key for data to come later may be stored and set beforehand. Forexample, the data unit 281 is entries for data to come later.

CPS unit setting units come in a wide variety, such as content titles,applications, data groups, and so forth, and each CPS unit managingtable has set therein CPS unit IDs serving as identifiers correspondingto each of the CPS units.

In FIG. 3, title 1 for example is the CPS unit 1, and at the time ofdecrypting encrypted content belonging to the CPS unit 1, generating thetitle key Kt1 and performing decryption processing based on thegenerated title key Kt1 is necessary.

In this way, the content stored in the information recording medium 100is stored in a manner having been subjected to encryption processingwith different encryption keys appropriated to each of the units, inorder to realize usage control different for each of the units. UR(usage rules) for each of the content managing unit (CPS unit) are setfor individual usage management with regard to each content managingunits (CPS unit). Usage rules are information including, e.g.,copy/reproduction control information (CCI) of content, as describedabove, and is copy restriction information or reproduction restrictioninformation of the encrypted content contained in each of the contentmanaging units (CPS units).

Data processing applying various types of information stored in theinformation recording medium is necessary for generating a title key.Specific examples of such processing will be described later in detail.

3. Overview of Data Configuration of Content Including Modified Data,and Data Transformation Processing

Next, description will be made regarding the overview of dataconfiguration of content including modified data, and datatransformation processing. As described above, encrypted content 101included in the information recording medium 100 is set as broken datawherein part of the configuration data is replaced with data differentfrom the proper content data, so that decryption processing alone doesnot perform content reproduction at the time of reproduction, andprocessing for replacing the broken data with the transformation dataregistered in the fix-up table is necessary.

The configuration of content stored in the information recording medium,and the overview of reproduction processing, will be described withreference to FIG. 4. For example, AV (Audio Visual) content such as amovie is stored in the information recording medium 100. These contentsare subjected to encryption, and content reproduction is possiblefollowing decryption by processing applying an encryption key obtainableonly by a reproduction and device having a certain license. Specificcontent reproduction processing will be described later. The contentstored in the information recording medium 100 is not only encrypted,but also has a configuration wherein the content configuration data hasbeen replaced with modified data.

FIG. 4 illustrates the configuration example of a recorded content 291stored in the information recording medium 100. The recorded content 291is configured of normal content data 292 which has not been modified,and broken data 293 which is content that has been destroyed by beingmodified. The broken data 293 is data which has been destroyed by theoriginal content having been subjected to data processing. Accordingly,proper content reproduction cannot be performed with this content 291including the broken data.

In order to perform content reproduction, processing for replacing thebroken data 293 included in the recorded content 291 with a propercontent data, to generate reproduction content 296, is necessary. Datafor transforming (transformation data) which is the normal content datacorresponding to each of the broken data regions is obtained byobtaining the transformation data 295 [Fix-up Entry 295] registered inthe fix-up table (FUT) 105 (see FIG. 1) recorded in the informationrecording medium 100, executing processing for replacing with the dataof the broken data region, thereby generating and reproducing thereproduction content 296. Specific examples of a fix-up table, anddetails of reproduction processing using a fix-up table, will bedescribed later.

Now, at the time of generating reproduction content 296, in addition tothe processing for replacing the broken data 293 with transformationdata 297 which is normal content data, processing is performed forreplacing a partial region of the recorded content 291 withidentifier-set transformation data 298 including data enabling analysisof the configuration bits of identification information making a contentreproduction device or content reproduction application identifiable(e.g., a player ID). For example, in a case of unauthorized copiedcontent leaking out, analyzing the identifier-set transformation data298 within the leaked content can enable the source of leakage of theunauthorized content to be determined.

Note that the fix-up table storing the transformation data is recordedin the information recording medium, set as a file separate from thecontent. Further, a part of the data in the fix-up table including thetransformation data is recorded in a manner scattered throughout certainpackets in the configuration data of the content. That is to say, thetransformation data is stored in the fix-up table 105 shown in FIG. 1,and is also scattered and recorded in the encrypted content 101, so asto be recorded in duplicate. An information processing device forexecuting content reproduction either obtains transformation data storedin the fix-up table 105 to execute data replacement, or obtains atransformation entry recorded in a scattered manner through the content,to execute data replacement.

In the event of a configuration of recording in a fix-up table block,which is fix-up table configuration data including transformation datascattered throughout certain packets within the content configurationdata, the fix-up table block configuration data is stored in transportstream packets including content, with a setting such as shown in FIG.5, for example. In FIG. 5, (a) illustrates the configuration of contentdata. This content configuration illustrates content data made up ofdecrypted transport stream (TS) packets. The transport stream isconfigured from TS (Transport Stream) packets having a predeterminednumber of bytes. Configuration data of the fix-up table block includingthe transformation data is recorded in a part of the multiple packets ofthese TS packets, in a divided matter. For example, recording is made inthe TS packet 307 shown in the drawing. An example of TS packets usedfor storing fix-up table blocks include TS packets including PMT(program map table) set in a scattered matter throughout the content,and so forth.

Recorded in a fix-up table block is transformation data for performing areplacement processing with regard to the decrypted content (oridentifier-set transformation data), and the recorded position of thetransformation data. As for recording position information, in the eventthat there are multiple recording positions such as shown in (b) in FIG.5, for example, the offset from the TS packet 307 including the fix-upentry which is the configuration data of the fix-up table block, isrecorded for the first modified packet position, and the offset positionindicates the relative packet position from the first modified packet308 to the subsequent modified packet 309 is recorded for the modifiedpacket position of the second packet.

The transformation data recorded in each of the fix-up table blocks hasthe recorded position set nearby a TS packet including a fix-up entryserving as configuration data of each of the fix-up table blocks, asshown in (b) in FIG. 5, for example.

In the example shown in (b) in FIG. 5, for example, the packets 308 and309 having transformation data recording regions are set nearby thepacket 307 having a fix-up entry which is configuration data of thefix-up table block. Such setting enables data replacement processingusing transformation data as continuous processing following decryptionin the case of decrypting and reproducing a content in real-time, anddetection and analysis processing of TS packets recording the fix-uptable allows processing for obtaining the transformation data andwriting the transformation data to the position recorded in the table(overwriting) to be carried out effectively.

A configuration example of the data transformation processing program300 stored in the information recording medium 100, a fix-up table (FUT)301, and encrypted content 306, will be described with reference to FIG.6. The fix-up table 301 recorded in the information recording medium 100has a configuration including a secret parameter ID determining table302, and a fix-up table body 303 a, as shown in FIG. 6.

The fix-up table body 303 a is set as a fix-up table group 303 b foreach clip, fix-up tables in units of each clip are configured ofmultiple fix-up table blocks 1 through K304, and further, each of thefix-up table blocks have a configuration including multiple fix-upentries 305. Each of these fix-up entries include transformation data tobe applied as replacement data, and recorded position information of thetransformation data.

FIG. 7 illustrates a data configuration example of one fix-up entry(FixUpEntry) included in a fix-up table block. As shown in FIG. 7, afix-up entry (FixUpEntry) contains the following data.

type_indicator: Type identifier [00: no transformation, 01b: processingwith transformed data, 10b, 11b: processing with transformed dataincluding identification mark]

FM_ID_bit_position: Identification bit position of player IDcorresponding to identifier-set transformation data

relative_SPN: Position of packet where transformation data is to beapplied (number of packets from PMT packet)

byte_position: position where transformation data is recorded in thepacket

overwrite_value: Transformation data (also including identifier-settransformation data)

relative_SPN_(—)2: Position of packet where second transformation datais applied (number of packets from PMT packet)

byte_position_(—)2: Position where transformed data is recorded in thepacket (corresponding to second transformation data)

overwrite_value_(—)2: Second transformation data (also includingidentifier-set transformation data)

Configuration is made of this data.

A fix-up table is set as a fix-up table recording transformation datafor replacing with a part of the content data, and setting positioninformation of the transformation data as to the content, with thisfix-up table being applied to execute a data transformation processingprogram including content configuration data replacement processingexecution commands, thereby performing data transformation.

The information [type_indicator] included in the fix-up entry(FixUpEntry) information contained in the fix-up table block shown inFIG. 7 is a type identifier for identifying whether registrationinformation of the fix-up table is (a) or is (b) as follows, i.e.,:

(a) whether registration information relating to transformation data fortransforming broken data into proper content data, or

(b) registration information relating to identifier-set transformationdata for embedding identification information of the reproduction deviceor content reproduction application.

In the event that the registration information range of the fix-up tableis a registration information range relating to identifier-settransformation data for embedding identification information of thereproduction device or content reproduction application, transformationdata to be selectively used based on the identification information ofthe content reproduction device or content reproduction application isregistered as table registration information, i.e., identifier-settransformation data is registered.

The registration information [FM_ID_bit_position] is positioninformation of a bit to be referred to from the identificationinformation of the reproduction device or reproduction application madeup of multiple bits, in order to determine the manner of processing. Themanner of processing is determined for data transformation such that,for example, in the event that the bit value is 1 for the bit to bereferred to from the identification information of the reproductiondevice or reproduction application made up of multiple bits, replacementof content configuration data is executed by the identifier-settransformation data registered in the fix-up table, and in the eventthat a bit value is 0 for the bit to be referred to, replacement is notexecuted.

Note that an arrangement may be made wherein transformation is executedin the event that the reference is 0 and transformation is not executedin the event that this is 1. Or, a configuration may be made wherein thetransformation data in the case that the reference bit is 0 and thetransformation data indicates that this is 1, are set as separatetransformation data, and the transformation data is selected and set assuitable according to the bit value of the reference bit.

As shown in FIG. 6, the encrypted content 306 is set as a TS packetstream, and packets with fix-up entries stored scattered throughout apart thereof, i.e., fix-up entry storage packets 307 a through 307 d areset. The AV stream is sectioned in units of clips, and fix-up entries inunits of clips are recorded scattered throughout the content.

Nearby transformation data is recorded in each of the fix-up entries setas such scattered recording data, as described with reference to FIG. 5.The fix-up entries recorded scattered throughout the encrypted content306 and fix-up entries included in the fix-up table 301 are the samething, and the information processing device which executes contentreproduction performs one or the other of obtaining transformation datafrom a fix-up entries recorded scattered through the content andreplacing the data, or obtaining transformation data from fix-up entriesin the fix-up table 301 and replacing the data, depending on thespecifications of the reproduction (player) application.

As shown in FIG. 6, the content is sectioned into segments ofpredetermined units of data. Fix-up entries that include eachtransformation data are subjected to computation or encryptionprocessing applying parameters (SP: secret parameters) which differ foreach predetermined unit of content (segment units).

An information processing device which executes the data transformationprocessing, which is the data replacing processing executed at the timeof reproducing the content, sequentially obtains the secret parameters(SP1, SP2, SP3 . . . ), performs computation or encryption processingapplying the obtained parameters (SPn) for the fix-up table blockincluding the transformation data corresponding to each segmentposition, thereby performing processing of obtaining the transformationdata.

The secret parameter (SP) ID determining table 302 shown in FIG. 6 is atable recording guide information regarding which secret parametersshould be applied to which content data position. The details of thistable and examples of usage will be described later.

A specific example of data replacement based on transformation data willbe described with reference to FIGS. 8 and 9. First, a processingexample of executing data replacement by obtaining fix-up table blockconfiguration data including transformation data that has been recordedscattered through the content, will be described with reference to FIG.8.

In FIG. 8, (a) illustrates the configuration of the content recorded inthe information recording medium 100. The configuration data of thefix-up table block including fix-up entries is recorded scatteredthrough the TS packets 307 a through d shown in the drawing.

The data replacement processing sequence will be described withreference to (b) in FIG. 8. The processing shown in (b) in FIG. 8 isprocessing for executing a reproduction (player) application of thehost. (b) in FIG. 8 illustrates a part of the TS packet stream of thecontent belonging to segment ID=N, N+1, in the content configurationdata.

For example, the packet 311 including the fix-up entry recorded insegment ID=N stores an XORed fix-up entry 315 which is the result dataof exclusive-OR computation with the secret parameter (SPx). The hostreproduction (player) application which executes the data replacementprocessing performs exclusive-OR computation with the secret parameter(SPx) 316 with regard to the XORed fix-up entry 315, thereby obtainingthe fix-up entry 317, and obtains the transformation data and recordingposition information from the fix-up entry 317, to execute thereplacement processing for the packets 312 a and b at the datareplacement position.

The parameter (SPx) applied for the computation to obtain the fix-upentry 317 is supplied from the secure VM 320. For example, thereproduction (player) application obtains a secret parameter ID (SP_ID)serving as secret parameter specification information corresponding toeach segment, and outputs a secret parameter calculation requestincluding notification of the secret parameter ID as an interruption(INTRP) request to the secure VM, in order to obtain the secretparameter (SPn) necessary for each segment of the content. The secure VMcalculates the secret parameter (SPx) corresponding to the (SP_ID) inresponse to the secret parameter calculation request from thereproduction (player) application, and provides this to the reproduction(player) application as a response (Call).

As shown in FIG. 8, different segments have different parameters for theparameters (SPx) to be applied to the computation for obtaining thefix-up entries. For example, each segment is set to around 10 seconds ofcontent reproduction time, and the reproduction (player) applicationreceives parameters which differs for each segment every 10 seconds fromthe secure VM, restores the fix-up entry, obtains the transformationdata from the restored fix-up entry, and executes the data replacingprocessing.

FIG. 9 illustrates the processing example where in XORed fix-up entriesare obtained from one clip worth of fix-up table 303 b serving as anindependent fix-up table block file, rather than from a fix-up tableblock recorded scattered throughout the content, from which thecomputation or encryption processing is executed, the fix-up entries arerestored, and transformation data is extracted from the restored fix-upentries to perform data replacement.

In FIG. 9, (a) illustrates the configuration of content recorded in theinformation recording medium 100. Fix-up entries containingtransformation data are recorded scattered through the TS packets 307 athrough d shown in the drawing, but with this example, this data is notused, rather, one clip worth of fix-up table 303 b which isconfiguration data of a fix-up table independently recorded in theinformation recording medium is used, and the data replacement isexecuted applying the fix-up entry stored in this one clip worth offix-up table 303 b.

The data replacement sequence will be described with reference to (b) inFIG. 9. The processing shown in (b) in FIG. 9 is processing which isexecuted at the host reproduction (player) application. (b) in FIG. 9illustrates a part of the content TS packet stream belonging to segmentID=N, N+1, in the content configuration data.

For example, in the case of executing data replacement with regard tothe segment ID=N, the fix-up entry corresponding to the segment ID=Ncontained in the one clip worth of fix-up table 303 b is obtained.However, the fix-up entry x315 is an XORed fix-up entry 315 as theresult data of exclusive-OR computation with the secret parameter (SPx),in the same way as the fix-up table block recorded scattered throughoutthe content. The reproduction (player) application of the host toexecute the data replacement processing obtains the fix-up entry 317 byexecuting exclusive-OR computation with the secret parameter (SPx) 316with regard to the XORed fix-up entry 315, obtains the transformationdata and recorded position information from the fix-up entry 317, andperforms the replacement processing with the packets 312 a and b of thedata replacement positions.

The parameter (SPx) to be applied for the computation for obtaining thefix-up entries 317 is supplied from the security of the VM 320 in thesame way as the processing example described above. For example, thereproduction (player) application obtains the secret parameter ID(SP_ID) which is secret parameter specification informationcorresponding to each segment, and outputs a secret parametercalculation request including notification of the secret parameter ID asan interruption (INTRP) request to the secure VM, in order to obtain thesecret parameters (SPn) necessary for each segment of the content. Thesecure VM calculates the secret parameter (SPx) corresponding to theSP_ID in response to this secret parameter calculation request from thereproduction (player) application, and provides this to the reproduction(player) application as a response (Call).

As shown in FIG. 9, different segments have different parameters for theparameters (SPx) to be applied to the computation for obtaining thefix-up entries. For example, each segment is set to around 10 seconds ofcontent reproduction time, and the reproduction (player) applicationreceives parameters which differs for each segment every 10 seconds fromthe secure VM, restores the fix-up entry, obtains the transformationdata from the restored fix-up entry, and executes the data replacingprocessing.

Thus, the reproduction (player) application for executing contentreproduction receives secret parameters from the secure VM and in unitsof each segment, executes computation, executes restoration of fix-upentries which are the configuration data of the fix-up table block, andobtains the restored fix-up entries and performs data replacement. Notethat while the above-described processing example has been madeillustrating a case of using exclusive-OR (XOR) as the computationapplying the secret parameters, other competition processing may beapplied as well. Also, an arrangement may be made wherein encryptionprocessing or the like is executed applying secret parameters.

4. Processing of Reproduction (Player) Application and Secure VM

In the case of executing the above-described processing, thereproduction (player) application sequentially obtains different secretparameters (SP1, SP2, SP3 . . . ) in certain segment units, whilecarrying out content reproduction, meaning that secret parameters areobtained with regard to the secure VM and data replacement is performedbefore reproducing the switchover point of segments. In this case, thereproduction (player) application notifies the secure VM of the secretparameter ID (SP_I) as secret parameter specification information,thereby determining the necessary SP. The secret parameter ID (SP_I) isrecorded in the secret parameter (SP) ID determining table 302 describedwith reference to FIG. 6 earlier.

The reproduction (player) application needs to perform processing forsetting this secret parameter (SP) ID determining table 302 into areferable state. The series of processing sequences carried out by thereproduction application and secure VM will be described with referenceto FIG. 10.

As described earlier with reference to FIG. 1, transfer of informationor processing requests between the reproduction (player) application 150and secure VM 160 is carried out by a sequence of interruptions (INTRP)from the reproduction (player) application 150 to the secure VM 160, andresponse (Call) processing thereto from the secure VM 160 to thereproduction (player) application 150.

The processing sequence shown in FIG. 10 is a diagram illustrating thetypes of processing executed between the reproduction (player)application 150 and the secure VM 160 from the point of inserting theinformation recording medium storing content, to ejecting thereof.

For example, step S11 is processing for media initialization (MediaInitialize) which is executed as processing at the time of inserting aninformation recording medium (Disc), wherein the reproduction (player)application 150 loads a content code file (Content Code File) storingcode information necessary for the initial reproduction processing intoits memory, and starts execution. The content code file (Content CodeFile) determines the manufacturer, model, and so forth of thereproduction (player) application.

For example, the secure VM 160 determines whether or not the obtainedmodel is a model regarding which a security problem has occurred in thepast, and in the event that this is a model regarding which a securityproblem has occurred in the past, a check is made by executing thecontent code (Content Code) regarding whether or not a similar securityproblem has occurred. For example, certain values in the RAM of theinformation processing device, or operations of a certain device arechecked, inspecting whether or not in a correct state. Note that a checkprogram for each model may not be included in that initially-loadedcontent code file, and in this case another necessary content code fileis accessed. Upon completion of the initialization processing by thesecure VM 160, a response (Call) is notified to the reproduction(player) application 150, and the flow proceeds to the next step S12.

In step S12, title initialization processing (Title Initialize) isexecuted. The title is applied it as specified information of thecontent to be reproduced, a title corresponding to certain content to bereproduced is selected based on user specifications or the like, and atitle initialization processing request is output from the reproduction(player) application 150 to the secure VM 160, along with titleinformation.

The secure VM 160 generates a fix-up table on the memory of the secureVM 160 by collecting transformation data information corresponding toall clips necessary for reproducing the title, and notifies thereproduction (player) application 150 of the position in the memorywhere the table has been stored, such that the reproduction (player)application 150 can obtain the table. Note also that a security checkthe same as that for the media initialization in step S11 can beperformed during title initialization.

An example of processing for generating a fix-up table on the memory ofthe secure VM 160 by collecting transformation data corresponding to allclips necessary for reproducing the title, which is executed during thetitle initialization processing, will be described with reference toFIG. 11. FIG. 11 illustrates a memory region (e.g., 2 MB) which thesecure VM 160 can use. The content code which is code informationincluded in the data transformation processing program which the secureVM 160 has obtained from the information recording medium is storedhere. Note that this content code includes a fix-up table subjected toobfuscation processing such as encryption or the like.

Upon input of the title initialization request from the reproduction(player) application 150, the secure VM 160 performs decryptionprocessing of the fix-up table collecting transformation datainformation corresponding to all clips necessary for reproducing thetitle, from the content code as necessary, stores this in memory in astate subjected to processing such as the above-described XORed state(masked state), and notifies this memory storage position to thereproduction (player) application 150. This notification processing isexecuted as a response (Call) to the title initialization request(INTRP) from the reproduction (player) application 150.

Upon receiving a response (Call) from the secure VM 160 regarding thetitle initialization request (INTRP), the reproduction (player)application 150 copies and stores a necessary data portion from thefix-up table storing region in the memory region which the secure VM 160uses, to a memory region which the reproduction (player) application 150can use. For example, a secret parameter ID (SP_ID) determining tablefor obtaining a secret parameter ID (SP_ID) corresponding to a segmentof the content, described earlier with reference to FIGS. 6 through 9,is extracted and copied and stored in the memory region which thereproduction (player) application 150 can use.

In the event that the reproduction (player) application executesprocessing for obtaining the transformation data from the fix-up tableblock recorded scattered through the content, as described earlier withreference to FIG. 8, obtaining a secret parameter ID (SP_ID) determiningtable is sufficient, however, in the event that the player is such asthat described with reference to FIG. 9, i.e., a player which does notuse the fix-up table block recorded scattered through the content,processing is executed in this copy processing for copying and storingthe secret parameter ID (SP_ID) determining table, and also a fix-uptable block storing fix-up entries, in the memory region usable by theplayer. The XORed fix-up table block described with reference to FIG. 9is a fix-up table block copied to the memory region usable by thereproduction (player) application 150 in this processing.

Returning to FIG. 10, description will be continued regarding theprocessing sequences between the reproduction (player) application 150and secure VM 160. Step S13 is processing corresponding to the secretparameter (SP) calculation (Compute_SP) wherein the reproduction(player) application 150 outputs a SP calculation request (INTRP) to thesecure VM 160, and the secure VM 160 returns the calculation results(SP) to the reproduction (player) application 150 as a response (Call).In the event of outputting an SP calculation request (INTRP) to thesecure VM 160, the reproduction (player) application 150 obtains theSP_ID serving as SP specifying information from a secret parameter ID(SP_ID) determining table, for example, and gives notification thereof.

Note that in the event of obtaining the SP_ID as SP specifyinginformation and notifying the secure VM 160 of this, the reproduction(player) application 150 needs to accurately select the SP_IDcorresponding to the segment of content. A specific example of thatSP_ID selecting processing will be described later. The processing instep S13 is repeatedly executed for each segment.

The processing in step S14 is a request processing from the reproduction(player) application 150 to the secure VM 160, for other than the secretparameter calculation. For example, in the event that this is requestprocessing for execution of a security check, the secure VM 160 executesthe processing according to the request, and makes notification to thereproduction (player) application 150 regarding the processing resultsas a response (Call). Note that a register regarding which both thereproduction (player) application 150 and the secure VM 160 is capableof writing to and reading from is used for this information transfer,such as a player status register, register (PSR), for example.

The processing in step S15 is media finalizing (Media Finalize)processing at the time of the ejecting the information recording medium(Disc), with the content code (content code) processing status beingrecorded in nonvolatile memory. This processing enables past securitycheck information to continue to be used the next time the disk isinserted.

As described above, transfer of information, or processing requests andresponses between the reproduction (player) application 150 and thesecure VM 160 is carried out by interruption (INTRP) from thereproduction (player) application 150 to the secure VM 160, and response(Call) processing from the secure VM 160 to the reproduction (player)application 150.

In this case, the secure VM 160 does not perform all processing ofinterruptions (INTRP) input from the reproduction (player) application150, but executes some processing based on certain conditions, andrejects some processing. The way in which interruption processingrequests (INTRP) are accepted or rejected at the secure VM 160 isdescribed with reference to FIG. 12.

The graph 321 shown in the drawing illustrates mode transition in thesecure VM. Time (t) passes from the left to the right. First, in thebackground mode, a secret parameter (SP) calculation request is input asan interruption request from the reproduction (player) application. Atthis point, the secure VM is not executing processing, and accordinglyaccepts (Accept) the secret parameter (SP) calculation request, makes atransition to the parameter calculation mode, and executes the parametercalculation processing.

Further, in the event that an interruption request is received from thereproduction (player) application during this parameter calculation modeperiod, the first request is accepted, and continuously-receivedinterruption requests are rejected (Ignore).

The processing corresponding to the first interruption request receivedin the parameter calculation mode period is executed in the applicationrequest mode following completion of the parameter calculation modeperiod. Further, the secret parameter (SP) calculation request receivedin this period is accepted (Accept), and following completion ofApplication request mode, transition is made to the proper calculationmode, where the parameter calculation processing is executed in thisway, the secure VM has a configuration for holding just one unprocessedinterruption, before one type of interruption (INTRP). The second andsubsequent interruption requests are rejected (Ignore).

5. Content Reproduction Processing

Next, content reproduction processing which the host executes will bedescribed with reference to FIG. 13. FIG. 13 illustrates, from the left,an information recording medium 330 storing encrypted contents, a drive340 into which the information recording medium 330 is set so as toexecute data reading, and a host 345 which is connected with the driveso as to be capable of data communication, and which obtains the contentstored in the information recording medium 330 by the drive 340 andexecutes a reproduction application which executes reproductionprocessing thereof.

Note that the host 345 shown in FIG. 13 is shown sectioned into areproduction (player) application block 350 which executes processingsuch as content decryption, decoding, data transformation, and so forth,and the secure VM 360 block having a secure VM 360 which executes secretparameter (SP) calculation processing and so forth.

The information recording medium 330 stores an MKB (Media Key Block)331, title key file 332, encrypted content 333, fix-up tables 335, anddata transformation processing program 334. The host 345 holds thedevice key 351 to be applied to the MKB processing.

The processing sequence wherein the host 345 shown in FIG. 13 obtainsand reproduces the stored content within the information recordingmedium 330 via the drive 340 will be described. First, before readingout the stored content in the information recording medium 330, the host345 and drive 340 execute mutual authentication in step S101. Thismutual authentication is processing for confirming that the host anddrive are each authorized devices or application software. Various typesof processing can be applied to this mutual authentication processingsequence. As a result of the mutual authentication processing, the drive340 and host 345 share a session key (Ks) serving as a shared secretkey.

In step S101, following mutual authentication being executed betweenhost and drive, and the session key (Ks) shared, the reproduction(player) application 350 of the host 345 obtains the MKB 331 recorded inthe information recording begins 330 by the drive in step S102, executesprocessing of the MKB 331 applying the device key 351 stored in memory,and obtains the media key (Km) from the MKB.

As described above, the MKB (Media Key Block) 331 is an encryption keyblock generated based on a tree structure key distribution system knownas a type of broadcast encryption method, and is the key informationblock enabling obtaining of a media key (Km) which is a key necessaryfor content decryption, only by processing (decryption) based on thedevice key (Kd) stored in a device which has a valid license.

Next, in step S103, the media key (Km) obtained by the MKB processing instep S102 is applied to execute decryption of the title key file 332read from the information recording medium 330, thereby obtaining thetitle key (Kt). The title key file 332 stored in the informationrecording medium 330 is a file including data encrypted by the mediakey, and the title key (Kt) used for decryption of content can beobtained by processing applying the media key. Note that the decryptionprocessing in step S103 applies an AES encryption algorithm, forexample.

Next, the reproduction (player) application 350 of the host 345 readsout the encrypted content 333 stored in the information recording medium330 via the drive 340, stores the read out content in the track buffer352, executes decryption processing applying the title key(Kt) in stepS104 for the contents stored in the buffer, and obtains the decryptedcontent.

The decrypted content is stored in a plaintext TS buffer 353. (Plain TS)refers to a decrypted plaintext transport stream. Now, the decryptedcontent stored in the plaintext TS buffer 353 is content containing theabove-described broken data, which cannot be reproduced as it is, andthere is the need to perform predetermined data transformation (datareplacement by overwriting).

The processing example shown in FIG. 13 is a processing example wherefix-up entries recorded scattered in certain packets within theconfiguration data of the encrypted content are obtained, transformationdata is extracted therefrom, and data replacement is performed. That isto say, this is equivalent to the data transformation processingdescribed with reference to FIG. 8 earlier.

The fix-up entries divided and recorded in the content is data recordingthe transformation data (or identifier-set transformation data) forperforming replacement processing regarding the decrypted content, andthe recorded position where the transformation data is recorded.

The secure VM 361 reads out the data transformation processing program335 including command code information from the information recordingmedium 330, and intermittently generates and outputs secret parameters(SP1, SP2, SP3 . . . ) necessary for changing the fix-up table recordedin the information recording medium 330 along with the content into aplaintext fix-up table, during contents reproduction or before outputprocessing and during processing, based on control from an event handler354, and input of player information 355. This processing is performedintermittently.

The secret parameters (SP1, SP2, SP3 . . . ) are, as described above,computation for encryption processing parameters which switch over forsegments corresponding to predetermined content data units, andspecifically are, for example, exclusive-OR (XOR) operation parameters.The secure VM 361 executes processing for intermittently generating andoutputting parameters (SP1, SP2, SP3 . . . ) necessary for restoring thefix-up entries such as the configuration data of the fix-up table blockmodified by computation processing of encryption processing, based onrequests from the reproduction (player) application.

At the reproduction (player) application 350, in step S104, decryptionof the encrypted content 333 including fix-up entries is executed, thefix-up entries which are configuration data of the six-up table recordedin the content are separated by processing of a demultiplexer in stepS105, and table restoration and data transformation processing isexecuted in step S106 under control of the real-time event handler 356.Due to the control of the real-time event handler 356, the reproduction(player) application 350 outputs a secret parameter calculation requestcorresponding to switching over of segments as an interruption (INTRP)to the secure VM 361, receives secure parameters (SP1, SP2, SP3 . . . )from the secure VM 361, executes decryption or computation of the fix-uptable block to obtain the plaintext fix-up table block, and obtainsfix-up entries contained in the obtained fix-up table block.

Fix-up entries record transformation data, i.e.,

(a) transformation data

(b) identifier-set transformation data

and recording position specifying information in the content of theabove transformation data, with the reproduction (player) application350 executing data transformation processing for writing to thespecified position in step S106 as real-time processing in parallel withcontent reproduction processing or external output processing.

For example, in the event that the parameters (SP1, SP2, SP3 . . . ) areexclusive-OR (XOR) operation parameters with transformation datacorresponding to in units of predetermined content portion data, therestoration processing in step S303 is as follows:

[Fix-up table block 1] (XOR) [SP1]

[Fix-up table block 2] (XOR) [SP2]

[Fix-up table block 3] (XOR) [SP3]

and so on.

Exclusive-OR operation processing thereof is executed, thereby obtainingfix-up entries included in the fix-up table block data. Note that in theabove expressions, [A] (XOR) [B] refers to an exclusive-OR operation ofA and B.

Thus, the fix-up table block contains in the content 333 recorded in theinformation recording medium is divided into fix-up entries recording atransformation data and transformation data position informationcorresponding to each content portion, stored upon exclusive-ORoperation with secret parameters (SP1, SP2, SP3 . . . ). Theseparameters are continuously obtained and output by the secure VM 361.

In the table restoration and data transformation processing in stepS106, the transformation data is obtained from fix-up entries restoredby obtaining with computation or encryption processing applying thesecret parameters (SP1, SP2, SP3 . . . ), the broken data included inthe content is replaced with transformation data which is the propercontent configuration data, and further, data overwriting processingwherein identifier-set transformation data is replaced with a part ofthe data of the content is executed, thereby changing the stored data inthe plaintext TS buffer 353 into transformed data. The overview of thisdata transformation processing will be described with reference to FIG.14.

The encrypted content 333 stored in the information recording medium istemporarily stored in a track buffer 352 at the host side. This is thetrack buffer stored data 401 shown in FIG. 14(1). Decryption of theencrypted content which is the track buffer stored data 401 is executedby the host-side decryption processing, and the decryption result datais stored in the plaintext TS buffer 353. This is the decryption resultdata 402 shown in FIG. 14(2).

The decryption result data 402 includes broken data 403 which is not theproper content configuration data. The data transformation processingunit of the host executes processing for replacing this broken data 403with the transformation data 404 which is the correct contentconfiguration data. This replacing processing is executed as re-writing(overwriting) of a part of data, regarding data written to the plaintextTS buffer 353, for example.

Further, the data transformation processing which the host executes isnot only processing for replacing the broken data with transformationdata which is the normal content data, but also processing is executedfor replacing a part of the configuration data in the decryption resultdata 402 with identifier-set transformation data 405, as shown in FIG.14.

An identifier is data which enables configuration bits of identificationinformation making a content reproducing device or content reproducingapplication identifiable, as described above. A specific example is theconfiguration data of identification information (player ID) of aninformation processing device serving as a player for executing a hostapplication, or an identification mark generated based on the player ID.Identifier-set transformation data is data wherein bit values of thecorrect content data have been slightly changed within a level that doesnot affect reproduction of the content, as described above.

A great number of identifier-set transformation data 405 are set withinthe content, and collecting and analyzing the multiple sets ofidentifier-set transformation data 405 determines the player ID, forexample. Identifier-set transformation data 405 is data wherein theconfiguration bits of the normal content data has been changed within alevel wherein normal reproduction can be made as content, and this datawherein bit (identification mark configuration bit) determining isenabled by MPEG bit stream analysis.

A great number of the transformation data 404 and identifier-settransformation data 405 shown in FIG. 14 is registered in the fix-uptable stored in the information recording medium, and further,registration is made regarding the write position information of these.Executing data transformation processing based on the fix-up tablesstored information replaces the data stored in the plaintext TS buffer353 with the transformed data 406 shown in FIG. 14(3).

Subsequently, the transformed TS (Transport stream) is externally outputvia a network or the like, and is reproduced at an external reproducingapparatus. Or, transformation from a transport stream (TS) to anelementary stream (ES) is executed in step S107 by processing by ademultiplexer, and further, following decoding processing (step S108),this is reproduced via a display speaker.

6. Processing for Obtaining SP Identifier (SP_ID) Corresponding toSegment

As described above, content recording in the information recordingmedium is sectioned into segments, so at the time of performing datatransformation processing necessary for each segment, it is necessary toobtain secret parameters (SPn) which differ for each segment from thesecure VM, and restore a fix-up table block including fix-up entries,applying the obtained secret parameters.

In order to obtain secret parameters (SPn) which differ for each segmentfrom the secure VM, the reproduction (player) application obtains secretparameter identifiers (SP_ID) corresponding to each segment, andnotifies the secure VM of the obtained secret parameter identifier(SP_ID). The following is a description of multiple processing examples1 through 3 regarding techniques for obtaining the proper secretparameter identifiers (SP_ID) corresponding to each segment.

(6.1) Processing Example 1 for Obtaining SP Identifier (SP_ID)Corresponding to Segment

The processing example 1 for obtaining an SP identifier (SP_ID)corresponding to the segment will be described. In the presentprocessing example, SPNs (source packet number) serving asidentification information packets (TS packets) configuring the contentare registered beforehand in the secret parameter ID determining tabledescribed with reference to FIG. 6, correlated with SP identifiers(SP_ID).

The reproduction (player) application which is to execute contentreproduction first obtains an SPN (source packet number) correspondingto the content data to be reproduced, from an EP map recorded in clipinformation which is content reproduction section information. Further,based on the SPN (source packet number) obtained from the EP map, thesecret parameter ID determining table is searched, and an SP identifier(SP_ID) set corresponding to be obtained SPN (source packet number) isobtained.

The reproduction (player) application notifies the secure VM of the SPidentifier (SP_ID) obtained from the secret parameter ID determiningtable, and executes a secret parameter calculation request (INTRP).

The following is a detailed description of the present processingexample with reference to Drawings. FIG. 15 is a diagram describing acontent reproduction processing by content reproducing unit whichexecutes content reproduction, i.e., a reproduction (player)application. First, at the time of content reproduction, thereproduction (player) application obtains clip information, which isreproduction section information of the content.

For example, the clip information illustrated in FIG. 15A is selected.Clip information is EP maps including packet identifier information ofcontent, set as multiple sets of data. Each EP map includes, forexample, packet information relating to an I-picture within a GOP (GroupOf Pictures) serving as an encoded data unit of the MPEG data which isencoded data configuring the AV stream which is the reproduction contentshown in FIG. 15B.

An SPN (source packet number) is included in the packet information ofthe I-picture included in the EP map. For example, as shown in FIG. 15C,each GOP (Group Of Pictures) is configured of one I-picture 411 andmultiple P and B-pictures. The I-picture 411 is encoded data set as areference picture within the GOP, and the P and B pictures are pictureinformation which apply the I-picture information as referenceinformation.

Note that the packet to be set as broken data are in units of TS packet,and that TS packets are set this configuration data of the I-picture 411or P and B pictures, as shown in the drawing. That is to say, eachI-picture, or P and B-picture, are stored scattered in a great number ofTS packets.

For example, setting one of the TS packets making up the I-picture 411within this GOP as modified data (broken data) means that the I-picturewhich is the reference of the MPEG quoted data is broken, so theP-pictures and B-pictures which use the I-picture as reference toinformation for restoration (MPEG decoding) cannot be restored, andaccordingly, effective data destruction can be performed.

The reproduction (player) application for reproducing the contentobtains the transformation data recorded in the fix-up table by datatransformation, and executes data replacement. Note that, as describedabove, data replacement is not only for transformation data to bereplaced with the broken data, but also regarding identifier-settransformation data as well.

As described above, the transformation data is registered in a fix-uptable, but is subjected to computation or encryption applying adifferent secret parameter (SP) for each segment, and accordingly thereproduction (player) application for reproducing the content mustobtain a secret parameter corresponding to each segment from the secureVM.

With the present processing example, the reproduction (player)application obtains an SPN (source packet number) from an EP mapregistered in the clip information serving as content reproductionsection information, searches the secret parameter ID determining tablebased on the obtained SPN (source packet number), and obtains an SPidentifier (SP_ID) corresponding to the SPN (source packet number)regarding which reproduction is to be performed.

First, details of the EP map will be described with reference to FIGS.16 and 17. As shown in FIG. 16, the EP map (EP_map) 412 is data includedin a clip information file (clip information). Detection of theI-picture position based on the EP map will be described with referenceto FIG. 17. FIG. 17A shows a clip AV stream, with each rectangleindicating 192-bit source packets. Each source packet is set with a timestamp, and reproduction processing time is stipulated.

FIG. 17B illustrates the detailed configuration of source packet No.(X1). Each source packet is configured of the TP_extra header andtransport packet, with the transport packet being configured of varioustypes of header information, and data of I-PIC H and so on serving asMPEG2 entity data.

The clip information shown in FIG. 17C includes an EP map as describedabove. As shown in the drawing of the EP map includes the various dataof [PTS_EP start], [SPN_EP start], and [I_end_position_offset]. Themeaning of each data is as follows.

PTS_EP start: a time stamp corresponding to source packet includingsequence header (presentation time stamp).

SPN_EP start: head address of source packet including sequence header.

I_end_position_offset: offset of source packet including ending ofI-picture, from source packet including sequence header.

FIG. 17D illustrates the relation of these data.

That is to say, as shown in FIG. 17B, the configuration of datacontained in a source packet is stipulated, and by obtaining the data[PTS_EP start], [SPN_EP start], and [I_end_position_offset], shown inFIG. 17C, from the EP map, the I-picture position within the sourcepacket can be obtained based on this data.

With the present processing example, the reproduction (player)application for executing content reproduction obtains the SPN (sourcepacket number) corresponding to the data of the content to be reproducedfrom the EP map registered in the clip information is contentreproduction section information, searches the secret parameter ID bythe determining table based on the obtained SPN (source packet number),and obtains an SP identifier (SP_ID) corresponding to the SPN (sourcepacket number) to be reproduced.

FIG. 18 shows a flow chart explaining a data configuration example of asecret parameter (SP) ID determining table, and an SP calculationrequest processing sequence which the reproduction (player) applicationexecutes with regard to the secure VM.

Each step in the flowchart shown in FIG. 18 will be described. First, instep S201 the reproduction (player) application for playing the contentobtains clip information which is a reproduction section information ofthe content to be reproduced, and further, in step S201, obtains an EPmap included in the clip information. Further, in step S203, an SPNwhich is a source packet No. indicating the reproduction position isobtained from that obtained EP map.

For example, let us say the source packet number: SPN=9451000 has beenobtained. Next, in step S204 the SP_ID determining table is referenced.Note that this SP_ID determining table is configuration data of thefix-up table stored in the information recording medium as describedearlier with reference to FIG. 6, and that, as described earlier withreference to FIGS. 10 and 11, is copied to and stored in a memory regionwhich the reproduction application is capable of using.

As shown in FIG. 18, the SP_ID determining table is recorded as acorrelation table between SP_IDs, and source packet numbers (SPN). TheSP_ID determining table shown in the drawing is an SP_ID determiningtable corresponding to a clip. The source packet number (SPN) registeredcorresponding to each SP_ID is equivalent to the first packet number ineach segment making up the content.

In the example of that SP_ID determining table shown in the drawing, thesegment of the content to which the SP_ID=124, for example, correspondsto, is packet number (SPN) 9362153 through 9444310, and the segment ofthe content to which the SP_ID=125 corresponds to is packet number (SPN)9444311 through 9528254.

Let us say that in step S203, the reproduction application has obtainedthe source packet number: SPN=9451000 from the EP map in the clipinformation. In step S204, the reproduction application obtains theSP_ID corresponding to the source packet number: SPN=9451000 from theSP_ID determining table.

With the example of the SP_ID determining table shown in FIG. 18, thesource packet number: SPN=9451000 belongs to the packet numbers(SPN)=9444311 through 9528254 corresponding to the SP_ID=125.Accordingly, the secret parameter idea corresponding to the sourcepacket number: SPN=9451000 is SP_ID=125. In step S205, the secretparameter ID [SP_ID=125] corresponding to the source packet number:SPN=9451000 is obtained in this way.

In step S206, the reproduction (player) application notifies the secureVM of the obtained secret parameter ID [SP_ID=125], executes a secretparameters (SP) calculation request (INTRP) corresponding to thesegment, and obtains a secret parameter (SP) corresponding to thesegment from the secure VM.

A configuration example of a fix-up table and SP_ID determining tableapplicable with the present processing example, will be described withreference to FIGS. 19 and 20. FIG. 19 is a diagram illustrating theconfiguration of the fix-up table. The fix-up table includes thefollowing data.

Number of Clips (=Nclip): the Number of Clips Used in the Title.

FixUpTableBody_StartAddress: the start address for the fix-up table bodywithin the fix-up table.

SPChangePositionTable( ): the SP_ID determining table.

FixUpTableBody( ): the fix-up table body.

With the present processing example, the SP_ID determining table is atable wherein the packet No. regarding which the secret parameter (SP)to be changed is recorded, as shown in FIG. 18. That is to say, the headpacket No. of each segment is recorded corresponding to each SP_ID.

The data configuration example of the SP_ID determining table[SPChangePositionTable] contained in the fix-up table is shown in FIG.20. The SP_ID determining table is set as a table wherein is registeredsource packet numbers (SPN) serving as packet identifiers correspondingto the SP-changed portions included in each clip, for each clip. TheSP_ID determining table includes the following data.

Clip_ID: clip ID

Number of SP (=NSP): number of segments (SP_segment)

SP_segment_START_SPN: source packet number (SPN) at head of the segment(SP_segment) corresponding to SP_ID.

The reproduction application can obtain the head source packet number(SPN) of the segment (SP_segment) corresponding to the SP_ID, and obtainthe SP_ID corresponding to the SPN to be reproduced.

FIG. 21 illustrates the data configuration example of the fix-up tablebody [FixUpTableBody] included in the fix-up table. The fix-up tablebody has the following data for each clip.

Clip_ID: identifier (ID) of clip (in the case that clip_ID=1234,corresponds to 01234.clpi, 01234.m2ts clip file)

Number of SP (=NSP): number of segments (SP_segment) in clip

Further stored are, for each SP_ID, the data of

Start of address of FUT block( ): start address of fix-up table block(FUT block)

FUT Block: Fix-up Table Block

As shown in the drawing, each fix-up table block is set so as to includeall fix-up entries corresponding to one segment (SP_segment).

Description will be made regarding a data configuration example of onefix-up table block, with reference to FIG. 22. The fix-up table block isa table storing fix-up entries including transformation data serving asthe actual replacement data, and write position information, asdescribed earlier. The fix-up table block stores the following data.

Number of FixUpEntry in this block (=NFixups): the number of programmaps the tables (PMT) including the fix-up data (FxUp data) within asegment (SP_segment) corresponding this fix-up table block (FUT block).

Further, the following data is included for each of the fix-up entries.

Base SPN for FixUpEntry: source packet number (SPN) for program maptable (PMT) having fix-up entry (FixUpEntry) structure, that is thefirst in the segment (SP_segment).

FixUpEntry( ): fix-up entry; matches information of the fix-up entry(FixUpEntry) within the program map table (PMT) having fix-up entry(FixUpEntry) structure, that is the first in the segment (SP_segment).

Note that the fix-up entry (FixUpEntry) is data wherein is registeredtransformation data which is the object of actual replacement, and therecording position information of that transformation data, as describedwith reference to FIG. 7 earlier, where the reproduction (player)application extracts the recording position information of thetransformation data along with the transformation data from the fix-upentry, overwrites the transformation data at the specified position,thereby executing data transformation.

Next, description will be made regarding the content reproductionprocessing sequence involving data replacement with transformation databy obtaining a different secret parameter (SP) for each segment withreference to the flowchart in FIG. 23. First, in step S401, thereproduction (player) application determines the title to be reproduced,and issues a title initialization command to the secure VM. In stepS402, the secure VM executes the title initialization processing, andexecutes generation processing of the fix-up table (FixUpTable)corresponding to the title. This is the processing described early withreference to FIGS. 10 and 11, and corresponds to the processing in stepS12 in the sequence diagram shown in FIG. 10.

In step S403, the reproduction (player) application obtains informationthat is necessary from the fix-up table (FixUpTable). This is theprocessing described earlier with reference to FIG. 11, and is executedas processing for copying necessary information from the fix-up tablestored in the memory region of the secure VM to a memory region whichthe reproduction (player) application can use.

In the case of a reproduction (player) application which performs datatransformation by extracting fix-up entries FUT block multiplexed on theTS (transport stream) of the content, i.e., in the case of areproduction (player) application which executes the processingdescribed earlier with reference to FIG. 8, only the secret parameter(SP) ID determining table is copied to its own memory region. On theother hand, in the case of a reproduction (player) application whichdoes not use the FUT block multiplexed on the content TS (transportstream) but rather uses transformation data recorded in the fix-up tableblock within the fix-up table file, i.e., a reproduction (player)application (FUT-preload type player) which performs the processingdescribed earlier with reference to FIG. 9, the entire fix-up table iscopied to its own memory region.

Next, in step S404, the reproduction (player) application obtains clipinformation corresponding to the title, and obtains the source packetnumber (SPN) value corresponding to the reproduction start point fromthe EP map contained in the clip information.

Next, in step S405, the secret parameter ID (SP_ID) of the startingpoint is determined from the SP_ID determining table(SPChangePositionTable( )), based on the SPN obtained from the EP map.This processing is the processing described with reference to FIG. 18.

Next, in step S406, the secure VM is notified of the obtained secretparameter ID (SP_ID), and a secret parameter (SP) value calculationrequest is output. This processing is equivalent to the processing instep S13 described with reference to FIG. 10.

Next, in step S407, the reproduction (player) application obtains thesecret parameter (SP) value corresponding to the segment calculated bythe secure VM, executes restoration of the fix-up table block based onthe secret parameter (SP), obtains fix-up entries stored in the restoredfix-up table block, performs data transformation processing forreplacing data within the segment of the content with the transformationdata, based on the transformation data recorded in the fix-up entry andthe recording position thereof, and in step S408, decoding andreproducing processing is executed.

Further, in the case of going to the next segment, in step S410, the SPNof the next reproduction segment is obtained from the EP map, and theprocessing from step S405 on is executed. That is to say, based on theSPN obtained the EP map, the SP_ID corresponding to the segment isobtained from the SP_ID determining table (SPChangePositionTable( )),and the obtained SP_ID is notified to the secure VM, the SP valuecorresponding to the segment is obtained, the fix-up table block isrestored based on the obtained SP value, fix-up entries are obtainedfrom the restored fix-up table block, transformation data and recordingposition are extracted from the fix-up entry, and data transformationprocessing, wherein data in the segment of the content is replaced withtransformation data, is performed, for each segment.

According to this processing, processing is performed which applies adifferent secret parameter (SP) for each segment.

Next, the processing sequence in the case of performing specialreproduction processing, such as random access, will be described withreference to FIG. 24. Note that the processing shown in FIG. 24 onlyillustrates the processing sequence following the title initializationprocessing. That is to say, this shows processing following completionof the processing steps S401 through S403 in the processing flowchartshown in FIG. 23.

First, in step S421, the reproduction (player) application obtains an EPmap from clip information, in response to a special reproduction processrequest such as random access, and obtains the source packet number(SPN) value corresponding to the reproduction starting point from theobtained EP map.

Next, in step S422, the secret parameter ID (SP_ID) at the startingpoint is determined from the SP_ID determining table(SPChangePositionTable( )) based on the SPN obtained from the EP map.This processing is processing described with reference to FIG. 18.

Next, in step S423, the obtained secret parameter ID (SP_ID) is notifiedto the secure VM, and the secret parameter (SP) calculation request isoutput. This processing is equivalent to the processing in step S13described with reference to FIG. 10.

Next, in step S424, the reproduction (player) application obtains thesecret parameter (SP) value corresponding to the segment calculated bythe secure VM, executes restoration of the fix-up table block based onthe secret parameter (SP), obtains the fix-up entries stored in therestored fix-up table block, performs data transformation processing forreplacing data within the segment of the content with the transformationdata, based on the transformation data recorded in the fix-up entry andthe recorded position thereof, and in step S425, performs decoding andreducing processing.

Further, in the case of going to the next segment, in step S430, the SPNof the next reproduction segment is obtained from the EP map, and theprocessing from step S422 on is executed. That is to say, based on theSPN obtained from the EP map, the SP_ID corresponding to the segment isobtained from the SP_ID determining table (SPChangePositionTable( )),and the obtained SP_ID is notified to the secure VM, the SP valuecorresponding to the segment is obtained, the fix-up table block isrestored based on the obtained SP value, fix-up entries are obtainedfrom the restored fix-up table block, transformation data and recordingposition are extracted from the fix-up entry, and data transformationprocessing, wherein data in the segment of the content is replaced withtransformation data, is performed, for each segment.

As described above, the present processing example is configured suchthat the reproduction (player) application for executing contentreproduction first obtains, from an EP map recorded in clip informationserving as content reproduction section information, an SPN (sourcepacket number) corresponding to the segment of the content data to bereproduced, and subsequently searches the secret parameter IDdetermining table based on the obtained SPN (source packet number),obtains an SP identifier (SP_ID) set corresponding to the obtained SPN(source packet number), notifies the secure VM of the obtained SPidentifier (SP_ID), and executes a secret parameter calculation request(INTRP), so secret parameters (SP) sequentially corresponding to each ofthe segments can be correctly received from the secure VM, and contentreproduction can be performed while performing accurate datatransformation.

(6.2) Processing Example 2 for Obtaining SP Identifier (SP_ID)Corresponding to Segment

The processing example 2 for obtaining an SP identifier (SP_ID)corresponding to the segment will be described. In the presentprocessing example, the secret parameter ID determining table is of aconfiguration storing correlation data between secret parameter IDs(SP_ID) and EP map registration table identification information (EP mapregistration table ID).

The reproduction (player) application which is to execute contentreproduction first obtains an EP map from clip information correspondingto the content data to be reproduced, and based on the EP mapregistration table identification information (EP map registration tableID) corresponding to the EP map, obtains an SP identifier (SP_ID) setcorresponding to the EP map registration table ID from the secretparameter ID determining table.

The reproduction (player) application notifies the secure VM of the SPidentifier (SP_ID) obtained from the secret parameter ID determiningtable, and executes a secret parameter calculation request (INTRP).

The following is a detailed description of the present processingexample, with reference to the drawings. FIG. 25 is a diagramillustrating a data configuration example of the SP_ID determining table[SPChangePositionTable] applied in the present processing example. Inthe present processing example, the configuration of the fix-up table isthe same as the configuration shown in FIG. 19, as with theearlier-described processing example 1. Only the data configuration ofthe SP_ID determining table [SPChangePositionTable] is different fromthe processing example 1.

The SP_ID determining table shown in FIG. 25 stores correlation databetween the EP map registration table IDs and secret parameter IDs(SP_ID). Specifically, this stores correlation data between the EP mapregistration table ID of an EP map including information of the headpacket of the segment (SP_segment) which is the content configurationdata, and secret parameter ID (SP_ID). The SP_ID determining tableincludes the following data.

Clip_ID: clip ID

Number of SP (=NSP): number of segments (SP_segment)

SP_segment_start_EP_map_id: specifies the EP map registration table ID(EP_map_id) at the head of the segment (SP_segment) corresponding to theSP_ID, and the SP_ID can be obtained from the EP map registration tableID (EP_map_id) corresponding to the source packet number (SPN) to bereproduced, using this value.

The reproduction application can obtain the registration table ID of theEP map including the head source packet of the segment (SP_segment)corresponding to the SP_ID, and obtain the SP_ID corresponding to thesegment from the SP_ID determining table shown in FIG. 25, based on theEP map registration table ID.

Description will be made regarding the content reproduction processingsequence involving data replacement with transformation data byobtaining a different secret parameter (SP) for each segment by applyingthe SP_ID determining table shown in FIG. 25, with reference to theflowchart in FIG. 26.

First, in step S501, the reproduction (player) application determinesthe title to be reproduced, and issues a title initialization command tothe secure VM. In step S502, the secure VM executes the titleinitialization processing, and executes generation processing of thefix-up table (FixUpTable) corresponding to the title. This is theprocessing described early with reference to FIGS. 10 and 11, andcorresponds to the processing in step S12 in the sequence diagram shownin FIG. 10.

In step S503, the reproduction (player) application obtains informationthat is necessary, from the fix-up table (FixUpTable). This is theprocessing described earlier with reference to FIG. 11, and is executedas processing for copying necessary information from the fix-up tablestored in the memory region of the secure VM to a memory region whichthe reproduction (player) application can use.

In the case of a reproduction (player) application which performs datatransformation by extracting fix-up entries from an FUT blockmultiplexed on the TS (transport stream) of the content, i.e., in thecase of a reproduction (player) application which executes theprocessing described early with reference to FIG. 8, only the secretparameter (SP) ID determining table is copied to its own memory region.On the other hand, in the case of a reproduction (player) applicationwhich does not use the FUT block multiplexed on the content TS(transport stream) but rather uses transformation data recorded in thefix-up table block within the fix-up table file, i.e., a reproduction(player) application (FUT-preload type player) which performs theprocessing described earlier with reference to FIG. 9, the entire fix-uptable is copied to its own memory region.

Next, in step S504, the reproduction (player) application obtains clipinformation corresponding to the title, determines the EP map containedin the clip information, and obtains the value of the EP mapregistration table ID as registration table identification informationof the EP map that has been determined.

Next, in step S505, the secret parameter ID (SP_ID) of the startingpoint is determined from the SP_ID determining table(SPChangePositionTable( )), based on the EP map registration table ID.THE SP_ID determining table shown in FIG. 25 which stores thecorrelation data between the secret parameter ID (SP_ID) and theregistration table identification information of the EP map (EP mapregistration table ID) is used.

Next, in step S506, the secure VM is notified of the obtained secretparameter ID (SP_ID), and a secret parameter (SP) value calculationrequest is output. This processing is equivalent to the processing instep S13 described with reference to FIG. 10.

Next, in step S507, the reproduction (player) application obtains thesecret parameter (SP) value corresponding to the segment calculated bythe secure VM, executes restoration of the fix-up table block based onthe secret parameter (SP), obtains fix-up entries stored in the restoredfix-up table block, performs data transformation processing forreplacing data within the segment of the content with the transformationdata, based on the transformation data recorded in the fix-up entry andthe recording position thereof, and in step S508, decoding andreproducing processing is executed.

Further, in the case of going to the next segment, in step S510, the EPmap registration table ID of the EP map including information of thefirst packet in the next reproduction segment is obtained, and theprocessing from step S505 on is executed. That is to say, based on theobtained EP map registration table ID, the SP_ID correlated to the EPmap registration table ID is obtained from the SP_ID determining table(SPChangePositionTable( )), and the obtained SP_ID is notified to thesecure VM, the SP value corresponding to the segment is obtained, thefix-up table block is restored based on the obtained SP value, fix-upentries are obtained from the restored fix-up table block,transformation data and recording position are extracted from the fix-upentry, and data transformation processing, wherein data in the segmentof the content is replaced with transformation data, is performed, foreach segment.

According to this processing, processing is performed which applies adifferent secret parameter (SP) for each segment.

Next, the processing sequence in the case of performing specialreproduction processing, such as random access, will be described withreference to FIG. 27. Note that the processing shown in FIG. 27 onlyillustrates the processing sequence following the title initializationprocessing. That is to say, this shows processing following completionof the processing step S501 through S503 in the processing flowchartshown in FIG. 26.

First, in step S521, the reproduction (player) application determinesthe EP map used by clip information, in response to a specialreproduction process request such as random access, and obtains theregistration table identifier value of the determined EP map (EP mapregistration table ID).

Next, in step S522, the secret parameter ID (SP_ID) at the startingpoint corresponding to the EP map registration table ID is determinedfrom the SP_ID determining table (SPChangePositionTable( )) based on theobtained EP map registration table ID.

Next, in step S523, the obtained secret parameter ID (SP_ID) is notifiedto the secure VM, and the secret parameter (SP) calculation request isoutput. This processing is equivalent to the processing in step S13described with reference to FIG. 10.

Next, in step S524, the reproduction (player) application obtains thesecret parameter (SP) value corresponding to the segment calculated bythe secure VM, executes restoration of the fix-up table block based onthe secret parameter (SP), obtains the fix-up entries stored in therestored fix-up table block, performs data transformation processing forreplacing data within the segment of the content with the transformationdata, based on the transformation data recorded in the fix-up entry andthe recorded position thereof, and in step S525, performs decoding andreproducing processing.

Further, in the case of going to the next segment, in step S530, the EPmap registration table ID of the EP map including information of thefirst packet of the next reproduction segment is obtained, and theprocessing from step S522 on is executed. That is to say, based on theobtained EP map registration table ID, the SP_ID correlated with the EPmap registration table ID is obtained from the SP_ID determining table(SPChangePositionTable( )), the obtained SP_ID is notified to the secureVM, the SP value corresponding to the segment is obtained, the fix-uptable block is restored based on the obtained SP value, fix-up entriesare obtained from the restored fix-up table block, transformation dataand recording position are extracted from the fix-up entry, and datatransformation processing, wherein data in the segment of the content isreplaced with transformation data, is performed, for each segment.

As described above, the present processing example is configured suchthat the reproduction (player) application for executing contentreproduction first determines an EP map storing packet informationcorresponding to the start position of a segment of content data to bereproduced, from an EP map recorded in clip information serving ascontent reproduction section information, searches the secret parameterID determining table based on the registration table identifier of theEP map (EP map registration table ID), obtains an SP identifier (SP_ID)set corresponding to the EP map registration table ID, notifies thesecure VM of the obtained SP identifier (SP_ID), and executes a secretparameter calculation request (INTRP), so secret parameters (SP)sequentially corresponding to each of the segment can be correctlyreceived from the secure VM, and content reproduction can be performedwhile performing accurate data transformation.

(6.3) Processing Example 3 for Obtaining SP Identifier (SP_ID)Corresponding to Segment

Next, the processing example 3 for obtaining an SP identifier (SP_ID)corresponding to the segment will be described. In the presentprocessing example, segments to be set for the content are sectionedbased on the number of EP map registration tables set down beforehand.That is to say, a content section region having an entry pointindicating the reproduction start position equivalent to N EP mapregistration tables is one segment. N is an integer of 1 or more.

The reproduction (player) application which is to execute contentreproduction obtains an EP map from clip information corresponding tothe content data to be reproduced, and based on the EP map, sequentiallyobtains and reproduces TS packets configuring the content. As describedearlier with reference to FIG. 15, an EP map is set for each GOP, withthe reproduction (player application) performing the processing ofobtaining EP maps in the clip information and extracting and reproducingreproduction packets.

With this present processing example, the reproduction (player)application applies the EP map registration table ID corresponding tothe EP map used, to calculate the secret parameter ID (SP_ID). Or, thereproduction (player) application counts the number of EP mapregistration tables used, and determines that a segment switchover willoccur each time the number (N) of EP map registration tables making up asegment (corresponding to the N number of EP map registration tables) isreached, and accordingly performs processing for switching over thesecret parameter (SP) to be applied for restoration of the fix-up tableblock.

Each time the number (n) of EP map registration tables making up asegment (corresponding to the n number of EP map registration tables) isreached, of the reproduction (player) application and notifies thesecure VM of the incremented SP identifier (SP_ID) sequentially, andexecutes a secret parameter calculation request (INTRP).

The present processing example will be described in detail now withreference to the figures. FIG. 28 shows (a) the content configuration,and (b) EP map configuration data, applied in the present processingexample. As shown in the (a) content configuration, the content issectioned into GOPs, and information relating to I-pictures in each ofthe GOPs is recorded in respective EP map registration tables. As shownin the (b) EP map configuration data in FIG. 28, multiple EP mapregistration tables are recorded in the EP map, with an SPN (sourcepacket number) which is address information regarding the I-pictureregistered in each EP map registration table, and PTS (presentation timestamp) being recorded in a correlated matter.

Thus, an EP map has a data configuration of multiple EP map registrationtables being stored in a single file. The tables registered in the EPmap have table numbers, these being identified as EP map registrationtable IDs.

With the present processing example, a segment is set as a data regionof N EP map registration tables. The example shown in FIG. 28 is asetting wherein N=5, so that five EP map registration tables are set asone segment. In the contents shown in FIG. 28A, GOP 0 through GOP 4, theEP map registration tables 0 through an EP map registration table 4, aresectioned as one segment, and the following GOP 5 through GOP 9, i.e.,EP map registration table 5 through EP map registration table 9, aresectioned as one segment. In the same way, 5 GOPs (=5 EP mapregistration tables) are set as one segment.

In this case, as shown in FIG. 28B, the identifier (SP_ID) of the secretparameter applied to the segment corresponding to the EP mapregistration tables 0 through 4, is set to [0], and subsequently,

EP map registration tables 5 through 9: SP_ID=1,

EP map registration tables 10 through 14: SP_ID=2,

EP map registration tables 14 through 19: SP_ID=3,

and this way, the secret parameter identifier (SP_ID) is incremented by1 every 5 EP map registration tables.

The reproduction (player) application which reproduces the contentapplies the EP map registration table ID corresponding to the EP mapregistration table to be used, and calculates the secret parameter ID(SP_ID). The secret parameter ID (SP_ID) is determined by extracting aninteger portion of 0 or greater, calculated by the following expression.SP_ID=(EP map registration table ID)/N

In the above Expression, n is equivalent to the number of EP mapregistration tables within one segment, in the example in FIG. 28, thisis calculated as

EP map registration tables 0 through 4: SP_ID=0,

EP map registration tables 5 through 9: SP_ID=1,

EP map registration tables 10 through 14: SP_ID=2,

and so on.

Or, an arrangement may be made wherein, instead of applying the aboveExpression, the reproduction (player) application counts the number ofthe EP map registration tables to be used, determines that segmentswitchover will occur each time the EP map registration table number (N)making up the segment (corresponding to N EP map registration tables),and performs processing for switching over the secret parameter (SP)applied for restoration of the fix-up table block.

With the setting example shown in FIG. 28, N=5, so determination is madethat the segment switchover will occur every five EP map registrationtables, so that SP_ID is incremented by one every five EP maps, theSP_ID is determined, the determined SP_ID is output to the secure VM,and the secret parameter corresponding to the segment is obtained. Itgoes without saying that the segments can be determined at an integralunit other than N=5, but it is desirable for a unit of multiple EP mapregistration table entry points to be determined, with consideration forthe processing time of the reproduction device.

With the present processing example, different SP_IDs for each segmentcan be obtained based on the above Expression or an EP map registrationtable count, so there is no need to use a source packet number or secretparameter ID determining table for obtaining a secret parameter ID basedon the EP map registration table ID, as with the earlier-describedprocessing examples 1 and 2.

In the case of applying the present processing example, the contentreproduction processing sequence involving obtaining of secretparameters (SP) different for each segment, and data replacement withtransformation data, will be described with reference to the flowchartshown in FIG. 29.

First, in step S601, the reproduction (player) application determinesthe title to be reproduced, and issues a title initialization command tothe secure VM. In step S602, the secure VM executes the titleinitialization processing, and executes generation processing of thefix-up table (FixUpTable) corresponding to the title. This is theprocessing described early with reference to FIGS. 10 and 11, andcorresponds to the processing in step S12 in the sequence diagram shownin FIG. 10.

In step S603, the reproduction (player) application obtains informationthat is necessary, from the fix-up table (FixUpTable). This is theprocessing described earlier with reference to FIG. 11, and is executedas processing for copying necessary information from the fix-up tablestored in the memory region of the secure VM to a memory region whichthe reproduction (player) application can use.

In the case of a reproduction (player) application which performs datatransformation by extracting fix-up entries FUT block multiplexed on theTS (transport stream) of the content, i.e., in the case of areproduction (player) application which executes the processingdescribed early with reference to FIG. 8, only the secret parameter (SP)ID determining table is copied to its own memory region. On the otherhand, in the case of a reproduction (player) application which does notuse the FUT block multiplexed on the content TS (transport stream) butrather uses transformation data recorded in the fix-up table blockwithin the fix-up table file, i.e., a reproduction (player) application(FUT-preset type player) which performs the processing described earlierwith reference to FIG. 9, the entire fix-up table is copied to its ownmemory region.

Next, in step S604, the reproduction (player) application obtains clipinformation corresponding to the title, determines the EP map containedin the clip information, and obtains the value of the EP mapregistration table ID as registration table identification informationof the EP map that has been determined.

Next, in step S605, the SP_ID is calculated based on the EP mapregistration table ID. For example, with the number of EP mapregistration tables included in one segment as N, SP_ID is calculated bySP_ID=(EP map registration table ID)/N

Next, in step S606, the secure VM is notified of the obtained secretparameter ID (SP_ID), and a secret parameter (SP) value calculationrequest is output. This processing is equivalent to the processing instep S13 described with reference to FIG. 10.

Next, in step S607, the reproduction (player) application obtains thesecret parameter (SP) value corresponding to the segment calculated bythe secure VM, executes restoration of the fix-up table block based onthe secret parameter (SP), obtains fix-up entries stored in the restoredfix-up table block, performs data transformation processing forreplacing data within the segment of the content with the transformationdata, based on the transformation data recorded in the fix-up entry andthe recording position thereof, and in step S608, decoding andreproducing processing is executed.

Further, in the case of going to the next segment, in step S610, the EPmap registration table ID of the EP map including information of thefirst packet in the next reproduction segment is obtained, and theprocessing from step S605 on is executed. That is to say, the SP_ID iscalculated based on the obtained EP map registration table ID, theobtained SP_ID is notified to the secure VM, the SP value correspondingto the segment is obtained, the fix-up table block is restored based onthe obtained SP value, fix-up entries are obtained from the restoredfix-up table block, transformation data and recording position areextracted from the fix-up entry, and data transformation processing,wherein data in the segment of the content is replaced withtransformation data, is performed, for each segment.

According to this processing, processing is performed which applies adifferent secret parameter (SP) for each segment. Note that anarrangement may be made wherein the number of EP map registration tablesare counted to obtain the SP_ID, rather than obtaining the SP_ID basedon the expression applying the EP map registration table ID, asdescribed earlier.

Next, the processing sequence in the case of performing specialreproduction processing, such as random access, will be described withreference to FIG. 30. Note that the processing shown in FIG. 30 onlyillustrates the processing sequence following the title initializationprocessing. That is to say, this shows processing following completionof the processing steps S601 through S603 in the processing flowchartshown in FIG. 29.

First, in step S621, the reproduction (player) application determinesthe EP map registration table used by clip information, in response to aspecial reproduction process request such as random access, and obtainsthe value of the EP map registration table identifier (EP mapregistration table ID).

Next, in step S622, based on the obtained EP map registration table ID,SP_ID is calculated by the expressionSP_ID=(EP map registration table ID)/N.

Next, in step S623, the obtained secret parameter ID (SP_ID) is notifiedto the secure VM, and the secret parameter (SP) calculation request isoutput. This processing is equivalent to the processing in step S13described with reference to FIG. 10.

Next, in step S624, the reproduction (player) application obtains thesecret parameter (SP) value corresponding to the segment calculated bythe secure VM, executes restoration of the fix-up table block based onthe secret parameter (SP), obtains the fix-up entries stored in therestored fix-up table block, performs data transformation processing forreplacing data within the segment of the content with the transformationdata, based on the transformation data recorded in the fix-up entry andthe recorded position thereof, and in step S625, performs decoding andreducing processing.

Further, in the case of going to the next segment, in step S630, the EPmap registration table ID of the EP map including information of thefirst packet of the next reproduction segment is obtained, and theprocessing from step S622 on is executed. That is to say, the SP_ID iscalculated based on the obtained EP map registration table ID, thecalculated SP_ID is notified to the secure VM, the SP valuecorresponding to the segment is obtained, the fix-up table block isrestored based on the obtained SP value, fix-up entries are obtainedfrom the restored fix-up table block, transformation data and recordingposition are extracted from the fix-up entry, and data transformationprocessing, wherein data in the segment of the content is replaced withtransformation data, is performed, for each segment. Note that anarrangement may be made with this example as well wherein the number ofEP map registration tables are counted to obtain the SP_ID, rather thanapplying the expression.

As described above, the present processing example is configured suchthat the reproduction (player) application for executing contentreproduction first determines EP map registration tables correspondingto content data to be reproduced, from an EP map recorded in clipinformation serving as content reproduction section information, obtainsthe secret parameter ID (SP_ID) based on the EP map registration tableidentifier (EP map registration table ID), by applying an expression orby counting the number of EP map registration tables, notifies thesecure VM of the obtained SP identifier (SP_ID), and executes a secretparameter calculation request (INTRP), thereby obtaining the SPidentifier (SP-ID) without applying a special parameter ID determiningtable, so secret parameters (SP) corresponding to each of the segmentcan be correctly received from the secure VM, and content reproductioncan be performed while performing accurate data transformation.

7. Configuration of Information Processing Device

Next, the hardware configuration example of an information processingdevice which executes the processing of the above-described inreproduction (player) application and secure VM will be described withreference to FIG. 31. An information processing device 800 has the CPU809 which executes data processing following various types of programincluding OS, content reproduction and recording application programs,and programs for mutual authentication processing, processing andaccompanying the reproduction of contents, e.g., the above-describeddata transformation processing, and so forth, ROM 808 serving as astorage area for programs, parameters, etc., memory 810, andinput/output I/F 802 for input/output of digital signals, aninput/output I/F 804 having an A/D, D/A converter 805 for input/outputof analog signals, an MPEG CODEC 803 for executing encoding and decodingprocessing of MPEG data, TS-PS processing unit 806 for executing the TS(Transport stream)-PS (Program Stream) processing, encryption processingunit 807 for executing the various types of encryption processing, suchas mutual authentication decryption processing of encrypted content, andso forth, a recording medium 812 such as a hard disk, and a drive 811for driving the recording medium 812 and performing input/output of datarecording/reproducing signals, with each block being connected to a bus801.

The information processing device (host) 800 is connected with the driveby connecting bus such as a ATAPI-BUS, for example. Fix-up tables,content, and so forth, are input/output via the digital signalinput/output I/F 802. Encryption processing and decryption processing isperformed by the encryption processing unit 807, applying AESalgorithms, or the like, for example.

Note that programs for executing content reproduction or recordingprocessing are kept inside the ROM 808 for example, and the memory 810is used while executing the programs as necessary, for work area forkeeping the parameters and data.

The ROM 808 or recording medium 812 stores, for example, the public keyof an Administration Center, a secret key for a host, a public keycertificate for the host, and further, a drive CRL serving as arevocation list, and so forth.

At the time of reproducing or external output of content, datatransformation processing programs obtained from the informationrecording medium is applied to execute processing following the variousprocessing sequences described earlier in the processing example, suchas decryption of encrypted contents, restoration of fix-up tables,writing of transformation data based on data stored in fix-up tables,and so forth.

8. Information Recording Media Manufacturing Device and InformationRecording Medium

An information recording media manufacturing device and the informationrecording medium will be described. That is to say, description will bemade regarding the manufacturing device of the information recordingmedium applied to the above-described content reproduction processing,the method thereof, and information recording medium.

The information recording media manufacturing device is, for example, adevice for manufacturing the information recording medium 100 storingthe recorded data described with reference to FIG. 1 earlier.

The information recording medium manufacturing device includes: a dataprocessing unit for generating content including broken data differentfrom proper content configuration data, and a fix-up table including aparameter identifier determining table storing fix-up table body datastored by subjecting transformation data for replacement with the brokendata to computation or encryption processing with a parameter setcorresponding to a segment which is a sectioned region of content, and aparameter identifier which is identification information of theparameter; and a data recording unit for recording content including thebroken data, and the fix-up table, in an information recording medium.

One example of a parameter identifier determining table generated by thedata processing unit in the configuration of one embodiment of theinformation recording medium manufacturing device may be a tablecorrelating parameter identifiers with packet numbers of packets at thehead position of segments of content configuration data, as describedearlier with reference to FIG. 20.

Or, another example of a parameter identifier determining tablegenerated by the data processing unit in the configuration of oneembodiment of the information recording medium manufacturing device maybe a table correlating parameter identifiers with EP map registrationtable IDs serving as registration table identifiers for an EP mapincluding information of packets at the head position of segments ofcontent configuration data, as described earlier with reference to FIG.25.

The information recording medium generated by such a manufacturingdevice is, as described earlier with reference to FIG. 1 and otherdrawings, an information recording medium having as stored data:

(a) content including broken data different from proper contentconfiguration data; and

(b) a fix-up table including a parameter identifier determining tablestoring fix-up table body data stored by subjecting transformation datafor replacement with the broken data to computation or encryptionprocessing with a parameter set corresponding to a segment which is asectioned region of content, and a parameter identifier which isidentification information of the parameter.

In one embodiment, a fix-up table recorded in the information recordingmedium is a table correlating parameter identifiers with packet numbersof packets at the head position of segments of content configurationdata, as described earlier with reference to FIG. 20. This is a tablecorrelating parameter identifiers with EP map registration table IDsserving as registration table identifiers for an EP map includinginformation of packets at the head position of segments of contentconfiguration data, as described earlier with reference to FIG. 25.

The present invention has been described in detail so far with referenceto specific embodiments. However, it is self-evident that one skilled inthe art can make modifications and substitutions to the embodimentswithout departing from the essence of the present invention. That is tosay, the present invention has been disclosed in exemplary form, andshould not be interpreted restrictively. The judgment of the essence ofthe present invention should be made with reference to the Claimssection.

Note that the series of processing described in the Specification can becarried out by hardware, software, or a combination of both. In the caseof executing the processing with software, a program recording theprocessing sequence can either be installed in the memory within acomputer that has built-in dedicated hardware and executed, or theprogram can be installed in a general-purpose computer capable ofexecuting various types of processing.

For example, the program may be recorded in a hard disk or ROM (ReadOnly Memory) serving as recording media beforehand. Or, this may betemporarily or permanently stored (recorded) in removable media such asa flexible disk, CD-ROM (Compact Disc Read Only Memory), MO (Magnetooptical) disk, DVD (Digital Versatile Disc), magnetic disk,semiconductor memory, etc. Such removable recording media can beprovided as so-called packaged software.

Note that besides installing the program from removable recording mediasuch as described above to the computer, the program may be wirelesslytransferred to the computer from the download site, or transferred tothe computer over cable networks such as a LAN (Local Area Network) orthe Internet, with a computer receiving the program transferred in sucha way, so as to be installed in a built-in recording medium such as ahard disk or the like.

Also, the various types of processing described in the Specification arenot restricted to execution in the time-sequence described, and may beexecuted in parallel or independently, depending on the processingcapabilities of the device executing the processing. Also note thatsystem as used in the present Specification is a logical collection ofmultiple devices, and is not restricted to the devices of eachconfiguration being within a single housing.

1. An information processing device for executing content reproductionprocessing, comprising: a content reproduction processing unit having aprocessor that performs data transformation processing for replacing apart of configuration data of input content to be reproduced withtransformation data, and executing processing for reproducing thereproduction content; and a parameter generating unit for providing saidcontent reproduction processing unit with a parameter to be applied insaid data transformation processing; wherein said content reproductionprocessing unit has a configuration for obtaining a parameter identifierthat is different for each segment set as a sectioning region ofreproduction content, and outputting a parameter calculation request tosaid parameter generating unit; and wherein said parameter generatingunit has a configuration for providing said content reproducingprocessing unit with a parameter corresponding to a segment, in responseto the parameter calculation request from said content reproducingprocessing unit, said transformation data being registered in a fix-uptable and including proper content data, and said content reproductionprocessing unit has a configuration for subjecting fix-up table dataincluding said transformation data to execution of computationprocessing applying the parameter corresponding to the segment obtainedfrom said parameter generating unit, and for executing restorationprocessing of data including the transformation data applied asreplacement data as to the configuration data of said segment, whereinat least a part of the fix-up table is scattered in packets in theconfiguration data of the input content, said fix-up table includes thetransformation data registered to correspond to replacement data at apredetermined region within the reproduction content.
 2. The informationprocessing device according to claim 1, wherein said contentreproduction processing unit has a configuration for executingprocessing for obtaining a packet number of a configuration packet of asegment included in a reproduction section, from an EP map included inclip information which is content reproduction section information; andreferencing a parameter identifier determining table correlating saidparameter identifier with a packet number serving as contentconfiguration data, and obtaining a parameter identifier correspondingto a packet number of a configuration packet of said segment.
 3. Theinformation processing device according to claim 2, wherein saidparameter identifier determining table is a table wherein said parameteridentifier and the packet number of a packet at the head position of asegment which is content configuration data are correlated.
 4. Theinformation processing device according to claim 2, wherein said packetnumber is a source packet number (SPN) corresponding to an I-pictureincluded in an EP map.
 5. The information processing device according toclaim 1, wherein said content reproduction processing unit has aconfiguration for executing processing for obtaining an EP mapregistration table ID which is a registration table identifier of an EPmap included in clip information which is content reproduction sectioninformation; and referencing a parameter identifier determining tablecorrelating said parameter identifier with the EP map registration tableID, to obtain a parameter identifier corresponding to the packet numberof a configuration packet of said segment.
 6. The information processingdevice according to claim 5, wherein said parameter identifierdetermining table is a table wherein said parameter identifier, and theEP map registration table ID which is a registration table identifier ofan EP map including information of a packet at the head position of asegment which is content configuration data, are correlated.
 7. Theinformation processing device according to claim 1, wherein said contentreproduction processing unit has a configuration for executingprocessing for obtaining an EP map registration table ID which is aregistration table identifier of an EP map included in clip informationwhich is content reproduction section information; and calculating aparameter identifier corresponding to said segment, based on said EP mapregistration table ID.
 8. The information processing device according toclaim 7, wherein said content reproduction processing unit has aconfiguration for executing processing for calculating a parameteridentifier corresponding to said segment based on said EP mapregistration table ID, following the following expression:(SP_ID)=(EP_map_ID)/N wherein SP: ID: parameter identifier; EP_map_ID:EP map registration table ID; and N: the number of EP map registrationtables set corresponding to one segment.
 9. The information processingdevice according to claim 1, wherein said content reproductionprocessing unit has a configuration for executing processing forcounting the number of times of usage of an EP map registration tableincluded in clip information which is content reproduction sectioninformation, and calculating a parameter identifier corresponding tosaid segment based on the count for said EP map registration table. 10.The information processing device according to claim 1, wherein saidcontent reproduction processing unit has a configuration for executingprocessing for obtaining fix-up table data including said transformationdata from packets contained in the content, executing computationprocessing or encryption processing applying a parameter correspondingto a segment obtained from said parameter generating unit, and executingrestoration processing of data including transformation data applied asreplacement data as to configuration data of said segment.
 11. Theinformation processing device according to claim 1, wherein said contentreproduction processing unit has a configuration for executingprocessing for obtaining fix-up table data including said transformationdata from a fix-up table data different and independent from thecontent, executing computation processing or encryption processingapplying a parameter corresponding to a segment obtained from saidparameter generating unit, and executing restoration processing of dataincluding transformation data applied as replacement data as toconfiguration data of said segment.
 12. The information processingdevice according to any one of the claims 1 through 11, wherein saidparameter calculating unit has a configuration for being executed by avirtual machine set within the information processing device.
 13. Theinformation processing device according to any one of the claims 1through 11, having a configuration for a parameter calculation requestfrom said content reproduction processing unit to said parametercalculating unit being executed as an interruption request, andparameter provision from said parameter calculating unit to said contentreproduction processing unit being executed as a response to saidinterruption request.
 14. An information recording medium manufacturingdevice comprising: a data processing unit configured to generate contentincluding broken data different from proper content configuration data,and a fix-up table included in a non-transitory computer readable mediumincluding a parameter identifier determining table storing fix-up tablebody data stored by subjecting transformation data for replacement withsaid broken data to computation processing with a parameter setcorresponding to a segment which is a sectioned region of content, and aparameter identifier which is identification information of saidparameter; and a data recording unit for recording content includingsaid broken data, and said fix-up table, in a non-transitory informationrecording medium, said broken data being different than proper data,said transformation data being registered in a fix-up table andincluding proper content data, said fix-up table data including saidtransformation data to which the parameter corresponding to the segmentis applied in response to a calculation request for executingrestoration processing of data including the transformation data appliedas replacement data for the broken data, during reproduction, wherein atleast a part of the fix-up table is scattered in packets in theconfiguration data of the input content, said fix-up table includes thetransformation data registered to correspond to replacement data at apredetermined region within the reproduction content.
 15. Theinformation recording medium manufacturing device according to claim 14,wherein said parameter identifier determining table is a table whereinsaid parameter identifier and the packet number of a packet at the headposition of a segment which is content configuration data arecorrelated.
 16. The information recording medium manufacturing deviceaccording to claim 14, wherein said parameter identifier determiningtable is a table wherein said parameter identifier and an EP mapregistration table ID which is a registration table identifier of an EPmap including information of a packet at the head position of a segmentwhich is content configuration data are correlated.
 17. A non-transitoryinformation recording medium having stored: content of which a part ofcontent configuration data is replaced and reproduced; a fix-up tablehaving corresponded and registered a parameter identifier setcorresponding to a segment wherein the content configuration data issectioned into multiple segments and set, and transformation data whichincludes proper data and is an object to be replaced by a part of thecontent configuration data to be replaced; wherein the transformationdata is data having performed computation processing based on theparameter corresponding to the parameter identifier, and forreproduction the fix-up table data including said transformation datahas the parameter corresponding to the segment obtained applied theretoin response to a calculation request so that restoration processing ofdata including the transformation data can be applied as replacementdata, and wherein at least a part of the fix-up table is scattered inpackets in the configuration data of the input content, said fix-uptable includes the transformation data registered to correspond toreplacement data at a predetermined region within the reproductioncontent.
 18. The information recording medium according to claim 17,comprising: a presentation timestamp (PTS) of the entry point, and an EPmap whereupon a packet number which is an address is correlated andregistered; and said segments are sectioned based on the multiple entrypoints registered to the EP map.
 19. The information recording mediumaccording to claim 18, wherein said segment is sectioned based on afixed entry point.
 20. A data configuration embodied on a non-transitorycomputer readable medium having stored: content of which a part ofcontent configuration data is replaced and reproduced; a fix-up tablehaving correlated and registered a parameter identifier set to correlateto a segment wherein the content configuration data is sectioned intomultiple segments and set, and transformation data which is an object tobe replaced by a part of the content configuration data to be replaced;wherein the transformation data is data having performed computationprocessing based on the parameter correlating to the parameteridentifier, and wherein fix-up table data including said transformationdata is subjected to execution of computation processing applying theparameter corresponding to the segment applied thereto in response to acalculation response so that restoration processing of data includingthe transformation data can be applied as replacement data duringreproduction, and wherein at least a part of the fix-up table isscattered in packets in the configuration data of the input content,said fix-up table includes the transformation data registered tocorrespond to replacement data at a predetermined region within thereproduction content.
 21. An information processing method for executingcontent reproduction processing, comprising the steps of: contentreproduction processing executed in a processor of a contentreproduction processing unit for data transformation processing forrewriting a part of configuration data of input content to bereproduced, and processing for reproducing the reproduction content; andparameter generating executed in a parameter generating unit, forproviding said content reproduction processing unit with a parameter tobe applied in said data transformation processing; wherein said contentreproduction processing has a step for obtaining a parameter identifierthat is different for each segment set as a sectioning region ofreproduction content and outputting a parameter calculation requestaccompanied by said parameter identifier to said parameter generatingunit; wherein said parameter generating has a step for providing saidcontent reproducing unit with a parameter corresponding to a segment, inresponse to the parameter calculation request from said contentreproducing unit, and said content reproduction processing has a stepfor subjecting fix-up table data stored in a non-transitory computerreadable medium, said fix-up table data including said transformationdata to execution of computation processing applying the parametercorresponding to the segment, and for executing restoration processingof data including the transformation data applied as replacement data,and wherein at least a part of the fix-up table is scattered in packetsin the configuration data of the input content, said fix-up tableincludes the transformation data registered to correspond to replacementdata at a predetermined region within the reproduction content.
 22. Theinformation processing method according to claim 21, wherein saidcontent reproduction processing has a step for executing processing forobtaining a packet number of a configuration packet of a segmentincluded in a reproduction section, from an EP map included in clipinformation which is content reproduction section information; andreferencing a parameter identifier determining table correlating saidparameter identifier with a packet number serving as contentconfiguration data, and obtaining a parameter identifier correspondingto a packet number of a configuration packet of said segment.
 23. Theinformation processing method according to claim 22, wherein saidparameter identifier determining table is a table wherein said parameteridentifier and the packet number of a packet at the head position of asegment which is content configuration data are correlated.
 24. Theinformation processing method according to claim 22, wherein said packetnumber is a source packet number (SPN) corresponding to an I-pictureincluded in an EP map.
 25. The information processing method accordingto claim 21, wherein said content reproduction processing has a step forexecuting processing for obtaining an EP map registration table ID whichis a registration table identifier of an EP map included in clipinformation which is content reproduction section information; andreferencing a parameter identifier determining table correlating saidparameter identifier with the EP map registration table ID, to obtain aparameter identifier corresponding to the packet number of aconfiguration packet of said segment.
 26. The information processingmethod according to claim 25, wherein said parameter identifierdetermining table is a table wherein said parameter identifier, and theEP map registration table ID which is a registration table identifier ofan EP map including information of a packet at the head position of asegment which is content configuration data, are correlated.
 27. Theinformation processing method according to claim 21, wherein saidcontent reproduction processing has a step for executing processing forobtaining an EP map registration table ID which is a registration tableidentifier of an EP map included in clip information which is contentreproduction section information; and calculating a parameter identifiercorresponding to said segment, based on said EP map registration tableID.
 28. The information processing method according to claim 27, whereinsaid content reproduction processing has a step for executing processingfor calculating a parameter identifier corresponding to said segmentbased on said EP map registration table ID, following the followingexpression:(SP_ID)=(EP_map_ID)/N wherein SP: ID: parameter identifier; EP_map_ID:EP map registration table ID; and N: the number of EP map registrationtables set corresponding to one segment.
 29. The information processingmethod according to claim 21, wherein said content reproductionprocessing has a step for executing processing for counting the numberof times of usage of an EP map registration table included in clipinformation which is content reproduction section information, andcalculating a parameter identifier corresponding to said segment basedon the count for said EP map registration table.
 30. The informationprocessing method according to claim 21, wherein said contentreproduction processing has a step for executing processing forobtaining fix-up table data including said transformation data frompackets contained in the content, executing computation processing orencryption processing applying a parameter corresponding to a segmentobtained from said parameter generating, and executing restorationprocessing of data including transformation data applied as replacementdata as to configuration data of said segment.
 31. The informationprocessing method according to claim 21, wherein said contentreproduction processing has a step for executing processing forobtaining fix-up table data including said transformation data from afix-up table data different and independent from the content, executingcomputation processing or encryption processing applying a parametercorresponding to a segment obtained from said parameter generating unit,and executing restoration processing of data including transformationdata applied as replacement data as to configuration data of saidsegment.
 32. An information recording medium manufacturing methodcomprising the steps of: generating data processing for content of whicha part of content configuration data is replaced and reproduced; afix-up table stored in a non-transitory computer readable medium andhaving correlated and registered a parameter identifier which is set tocorrelate to a segment wherein the content configuration data issectioned into multiple segments and set, and transformation data whichis an object to be replaced by a part of the content configuration datato be replaced; wherein the transformation data has performedcomputation or coding processing based on the parameter correlating tothe parameter identifier; and data recording for recording contentincluding the broken data and the transformation table onto theinformation recording medium, such that during reproduction saidtransformation data is subject to execution of computation processingapplying the parameter corresponding to the segment in response to acalculation request, and restoration processing of data includes thetransformation data applied as replacement data, wherein at least a partof the fix-up table is scattered in packets in the configuration data ofthe input content, said fix-up table includes the transformation dataregistered to correspond to replacement data at a predetermined regionwithin the reproduction content.
 33. A non-transitory computer readablemedium having stored therein a computer program for executing contentreproduction processing on an information processing device, saidprogram when executed by a processor performs steps of: contentreproduction processing executed in a content reproduction processingunit for data transformation processing for rewriting a part ofconfiguration data of input content to be reproduced, and processing forreproducing the reproduction content; and parameter generating executedin a parameter generating unit, for providing said content reproductionprocessing with a parameter to be applied in said data transformationprocessing; wherein said content reproduction processing has a step forobtaining a parameter identifier that is different for each segment setas a sectioning region of reproduction content and outputting aparameter calculation request accompanied by said parameter identifierto said parameter generating unit; wherein said parameter generating hasa step for providing said content reproducing unit with a parametercorresponding to a segment, in response to the parameter calculationrequest from said content reproducing unit, said content reproductionprocessing unit has a configuration for subjecting fix-up table dataincluding said transformation data to execution of computationprocessing applying the parameter corresponding to the segment, and forexecuting restoration processing of data including the transformationdata applied as replacement data, and wherein at least a part of thefix-up table is scattered in packets in the configuration data of theinput content, said fix-up table includes the transformation dataregistered to correspond to replacement data at a predetermined regionwithin the reproduction content.